vbatts/microblog.pub
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Sign media URLs to avoid becoming an open proxy

Browse source 
Signatures are valid for ~1 week.
This commit is contained in:
Kevin Wallace 2022-11-04 01:59:40 -07:00 • committed by Thomas Sileo
parent 540b9d1470
commit a4cfd65009
4 changed files with 41 additions and 9 deletions
Download patch file Download diff file Expand all files Collapse all files

7
app/templates.py
View file

@ -60,12 +60,7 @@ def _filter_domain(text: str) -> str:
def _media_proxy_url(url: str | None) -> str:
if not url:
return BASE_URL + "/static/nopic.png"
if url.startswith(BASE_URL):
return url
encoded_url = base64.urlsafe_b64encode(url.encode()).decode()
return BASE_URL + f"/proxy/media/{encoded_url}"
return proxied_media_url(url)
def is_current_user_admin(request: Request) -> bool: