diff --git a/changedetectionio/blueprint/watchlist/templates/watch-overview.html b/changedetectionio/blueprint/watchlist/templates/watch-overview.html index 133f2a06..e6ecab17 100644 --- a/changedetectionio/blueprint/watchlist/templates/watch-overview.html +++ b/changedetectionio/blueprint/watchlist/templates/watch-overview.html @@ -304,12 +304,13 @@ html[data-darkmode="true"] .watch-tag-list.tag-{{ class_name }} { {%- endif -%} - {%- if watch.get('restock') and watch['restock']['price'] != None -%} - {%- if watch['restock']['price'] != None -%} + {%- if watch.get('restock') and watch['restock'].get('price') -%} + {%- if watch['restock']['price'] is number -%} {{ watch['restock']['price']|format_number_locale if watch['restock'].get('price') else '' }} {{ watch['restock'].get('currency','') }} - {%- endif -%} + {%- else -%} + {%- endif -%} {%- elif not watch.has_restock_info -%} {{ _('No information') }} {%- endif -%} diff --git a/changedetectionio/tests/test_security.py b/changedetectionio/tests/test_security.py index 8355a1b0..a76944cc 100644 --- a/changedetectionio/tests/test_security.py +++ b/changedetectionio/tests/test_security.py @@ -40,6 +40,7 @@ def test_favicon(client, live_server, measure_memory_usage, datastore_path): res = client.get(url_for('static_content', group='..', filename='__init__.py')) assert res.status_code != 200 + res = client.get(url_for('static_content', group='.', filename='../__init__.py')) assert res.status_code != 200