Check private key size for the final value

webssh/handler.py

@@ -90,16 +90,18 @@ class IndexHandler(MixinHandler, tornado.web.RequestHandler):
     def get_privatekey(self):
         name = 'privatekey'
         lst = self.request.files.get(name)  # multipart form
-        if not lst:
+        if lst:
-            return self.get_argument(name, u'')  # urlencoded form
-        else:
             self.filename = lst[0]['filename']
             data = lst[0]['body']
-            if len(data) > KEY_MAX_SIZE:
+            value = self.decode_argument(data, name=name).strip()
-                raise InvalidValueError(
+        else:
-                    'Invalid private key: {}'.format(self.filename)
+            value = self.get_argument(name, u'')  # urlencoded form
-                )
+
-            return self.decode_argument(data, name=name)
+        if len(value) > KEY_MAX_SIZE:
+            raise InvalidValueError(
+                'Invalid private key: {}'.format(self.filename)
+            )
+        return value
 
     @classmethod
     def get_specific_pkey(cls, pkeycls, privatekey, password):