Skip to content

Commit 5677d06

Browse files
authored
Do not treat empty non-form input as HTML. (encode#4566)
1 parent 26e51ec commit 5677d06

File tree

2 files changed

+26
-1
lines changed

2 files changed

+26
-1
lines changed

rest_framework/request.py

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -299,7 +299,10 @@ def _parse(self):
299299
stream = None
300300

301301
if stream is None or media_type is None:
302-
empty_data = QueryDict('', encoding=self._request._encoding)
302+
if media_type and not is_form_media_type(media_type):
303+
empty_data = QueryDict('', encoding=self._request._encoding)
304+
else:
305+
empty_data = {}
303306
empty_files = MultiValueDict()
304307
return (empty_data, empty_files)
305308

tests/test_testing.py

Lines changed: 22 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -8,6 +8,7 @@
88
from django.shortcuts import redirect
99
from django.test import TestCase, override_settings
1010

11+
from rest_framework import fields, serializers
1112
from rest_framework.decorators import api_view
1213
from rest_framework.response import Response
1314
from rest_framework.test import (
@@ -37,10 +38,22 @@ def redirect_view(request):
3738
return redirect('/view/')
3839

3940

41+
class BasicSerializer(serializers.Serializer):
42+
flag = fields.BooleanField(default=lambda: True)
43+
44+
45+
@api_view(['POST'])
46+
def post_view(request):
47+
serializer = BasicSerializer(data=request.data)
48+
serializer.is_valid(raise_exception=True)
49+
return Response(serializer.validated_data)
50+
51+
4052
urlpatterns = [
4153
url(r'^view/$', view),
4254
url(r'^session-view/$', session_view),
4355
url(r'^redirect-view/$', redirect_view),
56+
url(r'^post-view/$', post_view)
4457
]
4558

4659

@@ -181,6 +194,15 @@ def test_invalid_multipart_data(self):
181194
path='/view/', data={'valid': 123, 'invalid': {'a': 123}}
182195
)
183196

197+
def test_empty_post_uses_default_boolean_value(self):
198+
response = self.client.post(
199+
'/post-view/',
200+
data=None,
201+
content_type='application/json'
202+
)
203+
self.assertEqual(response.status_code, 200, response.content)
204+
self.assertEqual(response.data, {"flag": True})
205+
184206

185207
class TestAPIRequestFactory(TestCase):
186208
def test_csrf_exempt_by_default(self):

0 commit comments

Comments
 (0)