project_files_panel: return 404 for missing query parameter.

MIT-LCP · May 6, 2024 · 183740e · 183740e
1 parent 3f1128e
commit 183740e
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/physionet-django/project/views.py b/physionet-django/project/views.py
@@ -982,7 +982,10 @@ def project_files_panel(request, project_slug, **kwargs):
     """
     project, is_submitting = (kwargs[k] for k in ('project', 'is_submitting'))
     is_editor = request.user == project.editor
-    subdir = request.GET['subdir']
+    try:
+        subdir = request.GET['subdir']
+    except KeyError:
+        raise Http404()
 
     if is_submitting and project.author_editable():
         files_editable = True