fix(sanitize-project): listprojects.json accepts no parameters. proje…

…ct is not required for listjobs.json.
scrapy · Jul 17, 2024 · e86d261 · e86d261
1 parent 0f45e31
commit e86d261
Showing 1 changed file with 5 additions and 4 deletions.
diff --git a/scrapyd/webservice.py b/scrapyd/webservice.py
@@ -160,8 +160,7 @@ def render_POST(self, txrequest, project):
 
 
 class ListProjects(WsResource):
-    @with_safe_project_name
-    def render_GET(self, txrequest, project):
+    def render_GET(self, txrequest):
         projects = list(self.root.scheduler.list_projects())
         return {"node_name": self.root.nodename, "status": "ok",
                 "projects": projects}
@@ -217,8 +216,10 @@ def render_GET(self, txrequest):
 
 
 class ListJobs(WsResource):
-    @with_safe_project_name
-    def render_GET(self, txrequest, project):
+    def render_GET(self, txrequest):
+        args = native_stringify_dict(copy(txrequest.args), keys_only=False)
+        project = args.get('project', [None])[0]
+
         spiders = self.root.launcher.processes.values()
         queues = self.root.poller.queues