From 5c452aedd71316e7b8b60bdb3daf0552939a1c5c Mon Sep 17 00:00:00 2001 From: Aevann Date: Wed, 14 Feb 2024 17:39:26 +0200 Subject: [PATCH] enforce domain ban on post urls --- files/routes/posts.py | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/files/routes/posts.py b/files/routes/posts.py index ed5e68b885..454eabead0 100644 --- a/files/routes/posts.py +++ b/files/routes/posts.py @@ -510,8 +510,10 @@ def submit_post(v, hole=None): url = normalize_url(url) if v.admin_level < PERMS["IGNORE_DOMAIN_BAN"]: + domain = tldextract.extract(url).registered_domain + combined = (domain + urlparse(url).path).lower() for x in g.db.query(BannedDomain): - if url.startswith(x.domain): + if combined.startswith(x.domain): abort(400, f'Remove the banned link "{x.domain}" and try again!\nReason for link ban: "{x.reason}"') domain = tldextract.extract(url).registered_domain