validate file_format in upload_url

contentcuration/contentcuration/tests/viewsets/test_file.py

@@ -413,6 +413,22 @@ def test_duration_invalid(self):
 
         self.assertEqual(response.status_code, 400)
 
+    def test_invalid_file_format_upload(self):
+        self.client.force_authenticate(user=self.user)
+        file = {
+            "size": 1000,
+            "checksum": uuid.uuid4().hex,
+            "name": "le_studio",
+            "file_format": "ppx",
+            "preset": format_presets.AUDIO,
+            "duration": 10.123
+        }
+        response = self.client.post(
+            reverse("file-upload-url"), file, format="json",
+        )
+
+        self.assertEqual(response.status_code, 400)
+
     def test_insufficient_storage(self):
         self.file["size"] = 100000000000000
 

contentcuration/contentcuration/viewsets/file.py

@@ -3,6 +3,7 @@
 
 from django.core.exceptions import PermissionDenied
 from django.http import HttpResponseBadRequest
+from le_utils.constants import file_formats
 from rest_framework.decorators import action
 from rest_framework.permissions import IsAuthenticated
 from rest_framework.response import Response
@@ -164,6 +165,9 @@ def upload_url(self, request):
             filepath, checksum_base64, 600, content_length=size
         )
 
+        if file_format not in dict(file_formats.choices):
+            return HttpResponseBadRequest("Invalid file_format!")
+
         file = File(
             file_size=size,
             checksum=checksum,