octo/microblog.pub
1
0
Fork 0
mirror of https://git.sr.ht/~tsileo/microblog.pub synced 2025-06-05 21:59:23 +02:00
Code Issues Projects Releases Wiki Activity

Sign media URLs to avoid becoming an open proxy

Browse Source 
Signatures are valid for ~1 week.
This commit is contained in:
Kevin Wallace
2022-11-04 01:59:40 -07:00
committed by Thomas Sileo
parent 540b9d1470
commit a4cfd65009
4 changed files with 41 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
app/templates.py
View File

@ -60,12 +60,7 @@ def _filter_domain(text: str) -> str:
def _media_proxy_url(url: str | None) -> str:
if not url:
return BASE_URL + "/static/nopic.png"
if url.startswith(BASE_URL):
return url
encoded_url = base64.urlsafe_b64encode(url.encode()).decode()
return BASE_URL + f"/proxy/media/{encoded_url}"
return proxied_media_url(url)
def is_current_user_admin(request: Request) -> bool: