Explorar o código

Fix /pic/ exploit

Zed hai 7 meses
pai
achega
33dd9b6668
Modificáronse 1 ficheiros con 4 adicións e 0 borrados
  1. 4 0
      src/routes/media.nim

+ 4 - 0
src/routes/media.nim

@@ -93,6 +93,8 @@ proc createMediaRouter*(cfg: Config) =
 
     get re"^\/pic\/orig\/(enc)?\/?(.+)":
       var url = decoded(request, 1)
+      cond "amplify_video" notin url
+
       if "twimg.com" notin url:
         url.insert(twimg)
       if not url.startsWith(https):
@@ -107,6 +109,8 @@ proc createMediaRouter*(cfg: Config) =
 
     get re"^\/pic\/(enc)?\/?(.+)":
       var url = decoded(request, 1)
+      cond "amplify_video" notin url
+
       if "twimg.com" notin url:
         url.insert(twimg)
       if not url.startsWith(https):