mirror of
https://github.com/pinry/pinry.git
synced 2025-11-18 02:40:40 +01:00
bd984f9fd2
\d allows numbers from other digit systems, so urls like: http://demo.getpinry.com/१७/ are possible. This could lead to some nasty security issues in the future (ie. if you try to use pin number without using `int(...)`).
38 lines
1.4 KiB
Python
38 lines
1.4 KiB
Python
from django.conf.urls import patterns, include, url
|
|
from django.views.generic import TemplateView
|
|
|
|
from tastypie.api import Api
|
|
|
|
from .api import ImageResource, ThumbnailResource, PinResource, UserResource
|
|
from .feeds import LatestPins, LatestUserPins, LatestTagPins
|
|
from .views import CreateImage
|
|
|
|
|
|
v1_api = Api(api_name='v1')
|
|
v1_api.register(ImageResource())
|
|
v1_api.register(ThumbnailResource())
|
|
v1_api.register(PinResource())
|
|
v1_api.register(UserResource())
|
|
|
|
|
|
urlpatterns = patterns('',
|
|
url(r'^api/', include(v1_api.urls, namespace='api')),
|
|
|
|
url(r'feeds/latest-pins/tag/(?P<tag>(\w|-)+)/', LatestTagPins()),
|
|
url(r'feeds/latest-pins/user/(?P<user>(\w|-)+)/', LatestUserPins()),
|
|
url(r'feeds/latest-pins/', LatestPins()),
|
|
|
|
url(r'^pins/pin-form/$', TemplateView.as_view(template_name='core/pin_form.html'),
|
|
name='pin-form'),
|
|
url(r'^pins/create-image/$', CreateImage.as_view(), name='create-image'),
|
|
|
|
url(r'^pins/tag/(?P<tag>(\w|-)+)/$', TemplateView.as_view(template_name='core/pins.html'),
|
|
name='tag-pins'),
|
|
url(r'^pins/user/(?P<user>(\w|-)+)/$', TemplateView.as_view(template_name='core/pins.html'),
|
|
name='user-pins'),
|
|
url(r'^(?P<pin>[0-9]+)/$', TemplateView.as_view(template_name='core/pins.html'),
|
|
name='recent-pins'),
|
|
url(r'^$', TemplateView.as_view(template_name='core/pins.html'),
|
|
name='recent-pins'),
|
|
)
|