indymedia
/
epicyon
mirror of https://gitlab.com/bashrc2/epicyon
7
4
Fork 1
Code Issues 14 Releases Wiki Activity

Check that referer domain exists for nodeinfo

main
Bob Mottram 2022-01-30 21:41:16 +00:00
parent 603fb872f5
commit b88adf5e11
1 changed files with 5 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
daemon.py
View File

@ -1142,6 +1142,10 @@ class PubServer(BaseHTTPRequestHandler):
return True
if not self.path.startswith('/nodeinfo/2.0'):
return False
if not referer_domain:
if not debug and not self.server.unit_test:
self._400()
return True
if referer_domain == self.server.domain_full:
self._400()
return True
@ -1151,7 +1155,7 @@ class PubServer(BaseHTTPRequestHandler):
return True
self.server.nodeinfo_is_active = True
# is this a real website making the call ?
if not debug and not self.server.unit_test:
if not debug and not self.server.unit_test and referer_domain:
# Does calling_domain look like a domain?
if ' ' in referer_domain or \
';' in referer_domain or \