Merge branch 'main' into serializer_bug_1745

plone · Oct 1, 2024 · 7de6017 · 7de6017
2 parents 594d27b + 7a5fcf1
commit 7de6017
Showing 1 changed file with 7 additions and 2 deletions.
diff --git a/src/plone/restapi/services/aliases/add.py b/src/plone/restapi/services/aliases/add.py
@@ -18,7 +18,7 @@
 import plone.protect.interfaces
 import logging
 
-logger = logging.getLogger("Plone")
+logger = logging.getLogger(__name__)
 
 
 @implementer(IPublishTraverse)
@@ -94,11 +94,16 @@ def _reply_csv(self):
         form = self.request.form
         if not form.get("file"):
             raise BadRequest("No file uploaded")
+
+        file = form["file"]
+
+        if file.headers.get("Content-Type") not in ("text/csv", "application/csv"):
+            raise BadRequest("Uploaded file is not a valid CSV file")
+
         controlpanel = RedirectsControlPanel(self.context, self.request)
         storage = getUtility(IRedirectionStorage)
         status = IStatusMessage(self.request)
         portal = getSite()
-        file = form["file"]
         controlpanel.upload(file, portal, storage, status)
         file.close()