check invalid etudid

2024-06-01 14:27:02 +02:00 · 2024-06-01 14:27:02 +02:00 · 3575e89dc0
commit 3575e89dc0
parent 21c0625147
1 changed files with 5 additions and 0 deletions
--- a/app/models/etudiants.py
+++ b/app/models/etudiants.py
@ -199,6 +199,11 @@ class Identite(models.ScoDocModel):
    @classmethod
    def get_etud(cls, etudid: int) -> "Identite":
        """Etudiant ou 404, cherche uniquement dans le département courant"""
+        if not isinstance(etudid, int):
+            try:
+                etudid = int(etudid)
+            except (TypeError, ValueError):
+                abort(404, "etudid invalide")
        if g.scodoc_dept:
            return cls.query.filter_by(
                id=etudid, dept_id=g.scodoc_dept_id