diff --git a/project/docs/views/ajax.py b/project/docs/views/ajax.py index bd4a767..8fea4b6 100644 --- a/project/docs/views/ajax.py +++ b/project/docs/views/ajax.py @@ -15,6 +15,11 @@ def get_pair(request, model, param1, val1, param2): if not request.is_ajax(): return HttpResponseBadRequest() + if model not in ('Country', 'Measure',): + return HttpResponseBadRequest() + + raise_if_no_profile(request) + kwargs = {param1: val1} try: