[Fix] Allow POSTing to _count

Author: chrisseto

api/views/elasticsearch.py

@@ -34,7 +34,7 @@ def get(self, request, *args, url_bits='', **kwargs):
     def post(self, request, *args, url_bits='', **kwargs):
         # Disallow posting to any non-search endpoint
         bits = list(filter(None, url_bits.split('/')))
-        if len(bits) > 2 or bits[-1] not in ('_search', '_suggest'):
+        if len(bits) > 2 or bits[-1] not in ('_count', '_search', '_suggest'):
             return http.HttpResponseBadRequest()
         return self._handle_request(request, url_bits)
 

tests/api/test_elasticsearch.py

@@ -36,16 +36,19 @@ def test_limitted_post(self, client):
         assert client.post('/api/v2/search/type/id/_search/').status_code == 400
         assert client.post('/api/v2/search/type/id/some/thing/else/_search').status_code == 400
         assert client.post('/api/v2/search/type/id/some/thing/else/_search/').status_code == 400
+        assert client.post('/api/v2/search/type/id/some/thing/else/_count').status_code == 400
+        assert client.post('/api/v2/search/type/id/some/thing/else/_count/').status_code == 400
 
     def test_post_search(self, client):
         urls = (
             '/api/v2/search/_search',
             '/api/v2/search/_search/',
-            '/api/v2/search/type/_search',
-            '/api/v2/search/type/_search',
             '/api/v2/search/_suggest',
             '/api/v2/search/_suggest/',
-            '/api/v2/search/type/_suggest',
+            '/api/v2/search/type/_count',
+            '/api/v2/search/type/_count/',
+            '/api/v2/search/type/_search',
+            '/api/v2/search/type/_search',
             '/api/v2/search/type/_suggest',
         )
         with mock.patch('api.views.elasticsearch.requests.post') as post: