Update code

fossasia · Dec 6, 2024 · 5cfdea6 · 5cfdea6
1 parent 44ba409
commit 5cfdea6
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/server/venueless/api/views.py b/server/venueless/api/views.py
@@ -150,6 +150,9 @@ def post(request, *args, **kwargs) -> JsonResponse:
             title = titles.get(locale) or titles.get("en") or title_default
 
             attendee_trait_grants = request.data.get("traits", {}).get("attendee", "")
+            if not isinstance(attendee_trait_grants, str):
+                raise ValidationError("Attendee traits must be a string")
+
             trait_grants = {
                 "admin": ["admin"],
                 "attendee": (