Add comments explaining why we check if the body is bytes

AikidoSec · Nov 6, 2024 · 47ac147 · 47ac147
1 parent d393afd
commit 47ac147
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/aikido_zen/sources/django/run_init_stage.py b/aikido_zen/sources/django/run_init_stage.py
@@ -19,6 +19,9 @@ def run_init_stage(request):
             # E.g. XML Data
             body = request.body
         if isinstance(body, bytes):
+            # During a GET request, django leaves the body as an empty byte string (e.g. `b''`).
+            # When an attack is detected, this body needs to be serialized which would fail.
+            # So a byte string gets converted into a string to stop that from happening.
             body = str(body, "utf-8")
 
         context = None