From fb9f581a84400e82d828327695b02408aee0fd53 Mon Sep 17 00:00:00 2001
From: Benjamin Moody <benjaminmoody@gmail.com>
Date: Mon, 6 May 2024 11:18:43 -0400
Subject: [PATCH] edit_ethics: return 404 for missing query parameter.

---
 physionet-django/project/views.py | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/physionet-django/project/views.py b/physionet-django/project/views.py
index d7d5b806fa..9a83ab4b06 100644
--- a/physionet-django/project/views.py
+++ b/physionet-django/project/views.py
@@ -1518,6 +1518,8 @@ def edit_ethics(request, project_slug, **kwargs):
     elif request.method == 'POST' and 'remove_id' in request.POST:
         extra_forms = 0
         UploadedDocument.objects.get(id=int(request.POST['remove_id'])).delete()
+    else:
+        raise Http404()
 
     UploadedSupportingDocumentFormSet = generic_inlineformset_factory(
         UploadedDocument,