From baec1b6f26d97084187454e27672ec341d9cf5fb Mon Sep 17 00:00:00 2001
From: XeR <XeR@users.noreply.github.com>
Date: Sun, 7 Jun 2015 23:42:25 +0200
Subject: [PATCH] Prevents users from redefining a DOCTYPE

---
 storage_server.py | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/storage_server.py b/storage_server.py
index de4a74a..b047656 100644
--- a/storage_server.py
+++ b/storage_server.py
@@ -303,6 +303,10 @@ class StorageHTTPServerHandler(BaseHTTPServer.BaseHTTPRequestHandler):
             
             ret = '<?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema"><soap:Body>'
             
+            if "DOCTYPE" in post.upper():
+                logger.log(logging.ERROR, "User tried to redefine a DOCTYPE")
+                return
+
             dom = minidom.parseString(post)
             data = dom.getElementsByTagName('SOAP-ENV:Body')[0].getElementsByTagName('ns1:' + shortaction)[0]
             gameid = str(int(data.getElementsByTagName('ns1:gameid')[0].firstChild.data))