carpathianflorist
/
MarseyWorld
forked from MarseyWorld/MarseyWorld
1
0
Fork 0
Code Pull Requests Activity

don't bother try checking invalid urls

master
justcool393 2022-11-11 23:40:17 -06:00
parent d3b7f043c6
commit b1924e0cdf
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
files/routes/posts.py
View File

@ -1068,6 +1068,8 @@ extensions = IMAGE_FORMATS + VIDEO_FORMATS + AUDIO_FORMATS
def get_post_title(v): def get_post_title(v):
url = request.values.get("url") url = request.values.get("url")
if not url or '\\' in url: abort(400) if not url or '\\' in url: abort(400)
url = url.strip()
if not url.startswith('http'): abort(400)
checking_url = url.lower().split('?')[0].split('%3F')[0] checking_url = url.lower().split('?')[0].split('%3F')[0]
if any((checking_url.endswith(f'.{x}') for x in extensions)): if any((checking_url.endswith(f'.{x}') for x in extensions)):