mj-saunders
/
epicyon
forked from indymedia/epicyon
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Don't allow access to system actors

main
Bob Mottram 2020-10-13 10:47:10 +01:00
parent 3c8b6e0a9a
commit bbd27656d2
1 changed files with 5 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
daemon.py
View File

@ -8288,6 +8288,11 @@ class PubServer(BaseHTTPRequestHandler):
return False return False
def do_GET(self): def do_GET(self):
# don't allow access to system actors
if self.path == '/users/news' or self.path == '/users/inbox':
self._400()
return
callingDomain = self.server.domainFull callingDomain = self.server.domainFull
if self.headers.get('Host'): if self.headers.get('Host'):
callingDomain = self.headers['Host'] callingDomain = self.headers['Host']