From 60c3b76ee9bec9326b81aec43c6b4a8eaed8c746 Mon Sep 17 00:00:00 2001 From: Raphael Michel Date: Tue, 22 Jun 2021 11:00:21 +0200 Subject: [PATCH] Order creation API: Fix possible crash (PRETIXEU-4MS) --- src/pretix/api/serializers/order.py | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/src/pretix/api/serializers/order.py b/src/pretix/api/serializers/order.py index cc694a619e..a51da18636 100644 --- a/src/pretix/api/serializers/order.py +++ b/src/pretix/api/serializers/order.py @@ -199,7 +199,9 @@ class AnswerSerializer(I18nAwareModelSerializer): return data def validate(self, data): - if data.get('question').type == Question.TYPE_FILE: + if not data.get('question'): + raise ValidationError('Question not specified.') + elif data.get('question').type == Question.TYPE_FILE: return self._handle_file_upload(data) elif data.get('question').type in (Question.TYPE_CHOICE, Question.TYPE_CHOICE_MULTIPLE): if not data.get('options'):