plug security hole

2012-10-13 00:46:34 -04:00 · 2012-10-13 00:46:34 -04:00 · f83ff09d05
parent 3485f9fd92
commit f83ff09d05
1 changed files with 3 additions and 1 deletions
--- a/frontend/views.py
+++ b/frontend/views.py
@ -812,8 +812,10 @@ class FundPledgeView(FormView):
        # BUGBUG:  Make sure we are testing properly for successful authorization properly here  
        if url is not None:
            return HttpResponseRedirect(url)
-        else:
+        elif settings.DEBUG:
            return HttpResponse("preapproval_key: {0}".format(transaction.preapproval_key))
+        else:
+            raise Http404

        
 class NonprofitCampaign(FormView):