From c9afabfa1ce29ab3bf8ce4316c07ae1c9bebc445 Mon Sep 17 00:00:00 2001
From: Chad Birch <chad.birch@gmail.com>
Date: Wed, 5 Mar 2014 12:33:49 -0700
Subject: [PATCH] VSubmitParent: validate thing type

---
 r2/r2/lib/validator/validator.py | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/r2/r2/lib/validator/validator.py b/r2/r2/lib/validator/validator.py
index f29b01bef..4a21339a2 100644
--- a/r2/r2/lib/validator/validator.py
+++ b/r2/r2/lib/validator/validator.py
@@ -1083,6 +1083,9 @@ class VSubmitParent(VByName):
         fullname = fullname or fullname2
         if fullname:
             parent = VByName.run(self, fullname)
+            if not isinstance(parent, (Comment, Link, Message)):
+                abort(403, "forbidden")
+
             if parent:
                 if c.user_is_loggedin and parent.author_id in c.user.enemies:
                     self.set_error(errors.USER_BLOCKED)