# HG changeset patch
# User Matthew Wild <mwild1@gmail.com>
# Date 1701963827 0
# Node ID 076b79eb747fb25d064fe89fae377573c97a55ed
# Parent  671a6ad1f026ee26772f717a1c30b1fbc49d6bde
mod_http_admin_api: Abort request if no valid username

diff -r 671a6ad1f026 -r 076b79eb747f mod_http_admin_api/mod_http_admin_api.lua
--- a/mod_http_admin_api/mod_http_admin_api.lua	Thu Dec 07 15:43:16 2023 +0000
+++ b/mod_http_admin_api/mod_http_admin_api.lua	Thu Dec 07 15:43:47 2023 +0000
@@ -477,6 +477,9 @@
 end
 
 function update_user(event, username)
+	if not username then
+		return 400;
+	end
 
 	local request = event.request;
 	if request.headers.content_type ~= json_content_type