indymedia
/
epicyon
mirror of https://gitlab.com/bashrc2/epicyon
7
4
Fork 1
Code Issues 14 Releases Wiki Activity

More thorough check of host

main
Bob Mottram 2020-03-28 15:42:27 +00:00
parent 2f46c2b31f
commit c49f3846ad
1 changed files with 42 additions and 16 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

58
daemon.py
View File

@ -937,17 +937,30 @@ class PubServer(BaseHTTPRequestHandler):
callingDomain=None
if self.headers.get('Host'):
callingDomain=self.headers['Host']
if self.server.onionDomain:
if callingDomain != self.server.domain and \
callingDomain != self.server.domainFull and \
callingDomain != self.server.onionDomain:
print('GET domain blocked: '+callingDomain)
self._400()
return
else:
if callingDomain != self.server.domain and \
callingDomain != self.server.domainFull:
print('GET domain blocked: '+callingDomain)
self._400()
return
if self.server.blocklistUpdateCtr<=0:
self.server.blocklistUpdateCtr=self.server.blocklistUpdateInterval
self.server.domainBlocklist=getDomainBlocklist(self.server.baseDir)
#if self.server.blocklistUpdateCtr<=0:
# self.server.blocklistUpdateCtr=self.server.blocklistUpdateInterval
# self.server.domainBlocklist=getDomainBlocklist(self.server.baseDir)
self.server.blocklistUpdateCtr-=1
#self.server.blocklistUpdateCtr-=1
if callingDomain in self.server.domainBlocklist:
print('GET domain blocked: '+callingDomain)
self._400()
return
#if callingDomain in self.server.domainBlocklist:
# print('GET domain blocked: '+callingDomain)
# self._400()
# return
GETstartTime=time.time()
GETtimings=[]
@ -4389,17 +4402,30 @@ class PubServer(BaseHTTPRequestHandler):
callingDomain=None
if self.headers.get('Host'):
callingDomain=self.headers['Host']
if self.server.onionDomain:
if callingDomain != self.server.domain and \
callingDomain != self.server.domainFull and \
callingDomain != self.server.onionDomain:
print('POST domain blocked: '+callingDomain)
self._400()
return
else:
if callingDomain != self.server.domain and \
callingDomain != self.server.domainFull:
print('POST domain blocked: '+callingDomain)
self._400()
return
if self.server.blocklistUpdateCtr<=0:
self.server.blocklistUpdateCtr=self.server.blocklistUpdateInterval
self.server.domainBlocklist=getDomainBlocklist(self.server.baseDir)
#if self.server.blocklistUpdateCtr<=0:
# self.server.blocklistUpdateCtr=self.server.blocklistUpdateInterval
# self.server.domainBlocklist=getDomainBlocklist(self.server.baseDir)
self.server.blocklistUpdateCtr-=1
#self.server.blocklistUpdateCtr-=1
if callingDomain in self.server.domainBlocklist:
print('POST domain blocked: '+callingDomain)
self._400()
return
#if callingDomain in self.server.domainBlocklist:
# print('POST domain blocked: '+callingDomain)
# self._400()
# return
self.server.POSTbusy=True
if not self.headers.get('Content-type'):