piranha
/
retarD
forked from rDrama/rDrama
1
0
Fork 0
Code Pull Requests Activity

in /submit, don't get title for url if it ends with extension

master
Aevann1 2022-08-30 03:51:09 +02:00
parent df5122e032
commit 7a8eef2b99
1 changed files with 9 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
files/routes/posts.py
View File

@ -1250,6 +1250,12 @@ def pin_post(post_id, v):
return {"error": "Post not found!"}
extensions = (
'.webp','.jpg','.png','.jpeg','.gif',
'.mp4','.webm','.mov',
'.mp3','.wav','.ogg','.aac','.m4a','.flac'
)
@app.get("/submit/title")
@limiter.limit("6/minute")
@limiter.limit("6/minute", key_func=lambda:f'{SITE}-{session.get("lo_user")}')
@ -1257,7 +1263,9 @@ def pin_post(post_id, v):
def get_post_title(v):
url = request.values.get("url")
if not url or '\\' in url or 'pomf2.lain.la' in url:
if not url or '\\' in url: abort(400)
if any((url.lower().endswith(x) for x in extensions)):
abort(400)
try: x = requests.get(url, headers=titleheaders, timeout=5, proxies=proxies)