Stricter parsing of filters

2017-08-29 20:08:30 +02:00
parent 963e28d661
commit 31ba4eb876
2 changed files with 89 additions and 62 deletions
--- a/radicale/init.py
+++ b/radicale/init.py
@@ -927,6 +927,11 @@ class Application:
            else:
                collection = item.collection
            headers = {"Content-Type": "text/xml; charset=%s" % self.encoding}
-            status, xml_answer = xmlutils.report(
-                base_prefix, path, xml_content, collection)
+            try:
+                status, xml_answer = xmlutils.report(
+                    base_prefix, path, xml_content, collection)
+            except ValueError as e:
+                self.logger.warning(
+                    "Bad REPORT request on %r: %s", path, e, exc_info=True)
+                return BAD_REQUEST
            return (status, headers, self._write_xml_content(xml_answer))