def get_fonts(self, id): map = self._get_map_from_user_by_id(c.user, id) if map is None: abort(404) mapfile = Mapfile() mapfile.from_file(os.path.join(config['mapfiles_dir'], map.filepath)) # prevent JSON Array Cross-site Exploits (XSRF/CSRF) return {'fonts': mapfile.get_fonts()}