Added validation for form name when submitting custom request forms

CityOfNewYork · Aug 14, 2023 · faf17ff · faf17ff
1 parent 4987fd0
commit faf17ff
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/app/request/views.py b/app/request/views.py
@@ -110,6 +110,12 @@ def new():
         custom_metadata = json.loads(
             flask_request.form.get("custom-request-forms-data", {})
         )
+        # validate that form_name exists in custom_metadata JSON
+        for key,value in custom_metadata.items():
+            form_name = value.get('form_name', None)
+            if not form_name:
+                flash('An unexpected error occurred. Please try submitting your request again.', category='danger')
+                return redirect(url_for("request.new"))
         tz_name = (
             escape(flask_request.form["tz-name"])
             if flask_request.form["tz-name"]