Mercurial > public > sg101
view forums/views/attachments.py @ 715:820e57e621e8
Use |safe filter on Haystack templates to get better results w/quotes.
Content was getting escaped, so text with quotes around it was seemingly
missing from the search index. This change fixed that. I verified that the
search results will not leak raw HTML to the page so this should be safe to do.
author | Brian Neal <bgneal@gmail.com> |
---|---|
date | Tue, 17 Sep 2013 20:26:49 -0500 |
parents | 89b240fe9297 |
children | 7e0c3cbd3cda |
line wrap: on
line source
""" This module contains views for working with post attachments. """ import json from django.http import HttpResponse from django.http import HttpResponseForbidden from django.http import HttpResponseBadRequest from django.http import HttpResponseNotFound from forums.models import Post def fetch_attachments(request): """ This view is the target of an AJAX GET request to retrieve the attachment embed data for a given forum post. """ if not request.user.is_authenticated(): return HttpResponseForbidden('Please login or register.') post_id = request.GET.get('pid') if post_id is None: return HttpResponseBadRequest('Missing post ID.') try: post = Post.objects.get(pk=post_id) except Post.DoesNotExist: return HttpResponseNotFound("That post doesn't exist.") embeds = post.attachments.all().select_related('embed') data = [{'id': embed.id, 'html': embed.html} for embed in embeds] return HttpResponse(json.dumps(data), content_type='application/json')