fixed guessable CSRF token when detect_record_change, thanks Stephen Röttger

2014-07-02 08:27:02 -05:00
parent eec39aeeec
commit 55016cbd4d
4 changed files with 6 additions and 6 deletions
@@ -133,6 +133,8 @@ def populate_generator(table, default=True, compute=False, contents={}):
                continue
            elif field.type == 'id':
                continue
+            elif field.type == 'upload':
+                continue
            elif default and not field.default in (None, ''):
                record[fieldname] = field.default
            elif compute and field.compute:
@@ -153,8 +155,6 @@ def populate_generator(table, default=True, compute=False, contents={}):
                record[fieldname] = datetime.time(h, m, 0)
            elif field.type == 'password':
                record[fieldname] = ''
-            elif field.type == 'upload':
-                record[fieldname] = None
            elif field.type == 'integer' and \
                    hasattr(field.requires, 'options'):
                options = field.requires.options(zero=False)