preview_files_panel: return 404 for missing query parameter.

MIT-LCP · May 6, 2024 · 5001b8f · 5001b8f
1 parent 183740e
commit 5001b8f
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/physionet-django/project/views.py b/physionet-django/project/views.py
@@ -1213,7 +1213,10 @@ def preview_files_panel(request, project_slug, **kwargs):
     manipulate them. Called via ajax to navigate directories.
     """
     project = kwargs['project']
-    subdir = request.GET['subdir']
+    try:
+        subdir = request.GET['subdir']
+    except KeyError:
+        raise Http404()
 
     (display_files, display_dirs, dir_breadcrumbs, parent_dir,
      file_error) = get_project_file_info(project=project, subdir=subdir)