From e2b36b1dde0c70db4fdc5fe647c441dc285aeef2 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Jose=CC=81=20Padilla?= Date: Sun, 14 Apr 2013 19:32:28 -0400 Subject: [PATCH] Raise exception if not using webhook secret --- djrill/views.py | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/djrill/views.py b/djrill/views.py index 0f41709..722594b 100644 --- a/djrill/views.py +++ b/djrill/views.py @@ -90,6 +90,10 @@ class DjrillWebhookSecretMixin(object): secret = getattr(settings, 'DJRILL_WEBHOOK_SECRET', None) secret_name = getattr(settings, 'DJRILL_WEBHOOK_SECRET_NAME', 'secret') + if secret is None: + raise ImproperlyConfigured( + "You have not set DJRILL_WEBHOOK_SECRET in the settings file.") + if request.GET.get(secret_name) != secret: return HttpResponse(status=403)