RajatShukla / getpaid

Automatically exported from code.google.com/p/getpaid
0 stars 0 forks source link

in paypal length of notify_url not checked #249

Open GoogleCodeExporter opened 9 years ago

GoogleCodeExporter commented 9 years ago
the length of notify_url, the URL to which PayPal posts information about
the transaction is not checked in verify() of submit_handler.py or anywhere
I can see but shouldn't be more than 255 characters according to 
https://cms.paypal.com/us/cgi-bin/?cmd=_render-content&content_ID=developer/e_ho
wto_html_Appx_websitestandard_htmlvariables

(the variable is optional)

Original issue reported on code.google.com by danielle...@gmail.com on 12 Apr 2009 at 12:08