Better error handling on order parameter for sorting of user and books table

2026-04-06 15:12:09 +02:00
parent 7c715f34dc
commit 0ed4d81da2
2 changed files with 4 additions and 2 deletions
@@ -349,8 +349,9 @@ def list_users():
        if sort not in ub.User.__table__.columns.keys():
            sort = "id"
    order = request.args.get("order", "").lower()
-
    if sort != "state" and order:
+        if not order in ["asc", "desc"]:
+            order = "asc"
        order = text(sort + " " + order)
    elif not state:
        order = ub.User.id.asc()