Merge pull request #3185 from sabzo/feature/3132

if application content is not json, return 400
harvard-lil · Oct 13, 2022 · 20a824d · 20a824d
2 parents 400b283 + 817d927
commit 20a824d
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/perma_web/api/views.py b/perma_web/api/views.py
@@ -692,6 +692,9 @@ def post(self, request, format=None):
         # mark batch with user
         if not request.user.is_authenticated:
             raise PermissionDenied()
+        if request.content_type != 'application/json':
+            content = {'detail': 'content-type must be aplication/json'}
+            return Response(content, status=status.HTTP_400_BAD_REQUEST)
         request.data['created_by'] = request.user.pk
 
         # save batch