Render 404 if not ajax request

2013-08-07 17:13:38 -07:00 · 2013-08-07 17:13:38 -07:00 · 202d951c3d
commit 202d951c3d
parent b2d6c45850
1 changed files with 4 additions and 0 deletions
--- a/mediagoblin/user_pages/views.py
+++ b/mediagoblin/user_pages/views.py
@ -199,6 +199,10 @@ def media_post_comment(request, media):

 def media_preview_comment(request):
    """Runs a comment through markdown so it can be previewed."""
+    # If this isn't an ajax request, render_404
+    if not request.is_xhr:
+        return render_404(request)
+
    comment = unicode(request.form['comment_content'])
    cleancomment = { "content":cleaned_markdown_conversion(comment)}