From 279f6ece2005b336b0571ee572cfe0be762336c6 Mon Sep 17 00:00:00 2001 From: Bob Mottram Date: Fri, 27 Mar 2020 11:46:36 +0000 Subject: [PATCH] Early blocking of domains --- daemon.py | 16 ++++++++++++++++ 1 file changed, 16 insertions(+) diff --git a/daemon.py b/daemon.py index 84b1f78ac..d72cb7416 100644 --- a/daemon.py +++ b/daemon.py @@ -915,6 +915,14 @@ class PubServer(BaseHTTPRequestHandler): return locatePost(baseDir,nickname,domain,messageId),nickname def do_GET(self): + callingDomain=None + if self.headers.get('Host'): + callingDomain=self.headers['Host'] + if isBlockedDomain(self.server.baseDir,callingDomain): + print('GET domain blocked: '+callingDomain) + self._400() + return + GETstartTime=time.time() GETtimings=[] @@ -4282,6 +4290,14 @@ class PubServer(BaseHTTPRequestHandler): return self.server.lastPOST=currTimePOST + callingDomain=None + if self.headers.get('Host'): + callingDomain=self.headers['Host'] + if isBlockedDomain(self.server.baseDir,callingDomain): + print('POST domain blocked: '+callingDomain) + self._400() + return + self.server.POSTbusy=True if not self.headers.get('Content-type'): print('Content-type header missing')