Skip to content

Commit 148c1e1

Browse files
committed
Make component_search POST-only
As mentioned in code review.
1 parent 1fa69a6 commit 148c1e1

File tree

1 file changed

+2
-0
lines changed

1 file changed

+2
-0
lines changed

python/nav/web/maintenance/views.py

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -25,6 +25,7 @@
2525
from django.shortcuts import get_object_or_404, redirect, render
2626
from django.urls import reverse
2727
from django.utils.safestring import mark_safe
28+
from django.views.decorators.http import require_http_methods
2829

2930
import nav.maintengine
3031
from nav.django.utils import get_account
@@ -350,6 +351,7 @@ def edit(request, task_id=None, start_time=None, **_):
350351
)
351352

352353

354+
@require_http_methods(["POST"])
353355
def component_search(request):
354356
"""HTMX endpoint for component searches from maintenance task form"""
355357
search = request.POST.get("search")

0 commit comments

Comments
 (0)