From 633c25049048c59dfb6045763650eff27a364cfc Mon Sep 17 00:00:00 2001 From: Brian Simpson Date: Mon, 10 Feb 2014 15:08:16 -0500 Subject: [PATCH] VOrAdminSecret: don't check modhash on GET requests. --- r2/r2/lib/validator/validator.py | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/r2/r2/lib/validator/validator.py b/r2/r2/lib/validator/validator.py index d9e8a1442..4b8717e56 100644 --- a/r2/r2/lib/validator/validator.py +++ b/r2/r2/lib/validator/validator.py @@ -908,8 +908,9 @@ def make_or_admin_secret_cls(base_cls): # import here so that we don't close around VModhash # before r2admin can override - from r2.lib.validator import VModhash - VModhash(fatal=True).run(request.POST.get("uh")) + if request.method.upper() != "GET": + from r2.lib.validator import VModhash + VModhash(fatal=True).run(request.POST.get("uh")) return False return VOrAdminSecret