From 5b4ff2b4e9521ce4306216b25ae7c4bfa6de496a Mon Sep 17 00:00:00 2001 From: Jake Howard Date: Mon, 1 Aug 2022 21:42:06 +0100 Subject: [PATCH] Only allow GET for search results --- website/search/models.py | 3 +++ 1 file changed, 3 insertions(+) diff --git a/website/search/models.py b/website/search/models.py index 1da04ac..80870ca 100644 --- a/website/search/models.py +++ b/website/search/models.py @@ -2,7 +2,9 @@ from django.core.paginator import EmptyPage, Paginator from django.http.request import HttpRequest from django.http.response import HttpResponse, HttpResponseBadRequest from django.shortcuts import render +from django.utils.decorators import method_decorator from django.utils.functional import cached_property +from django.views.decorators.http import require_GET from rest_framework import serializers from wagtail.contrib.routable_page.models import RoutablePageMixin, route from wagtail.models import Page @@ -45,6 +47,7 @@ class SearchPage(BaseContentMixin, RoutablePageMixin, BasePage): # type: ignore return context @route(r"^results/$") + @method_decorator(require_GET) def results(self, request: HttpRequest) -> HttpResponse: if not request.GET.get("q", None): return HttpResponse()