This code runs https://rdrama.net and https://watchpeopledie.tv
Snakes
616634158c
Probably will break some peoples' profilecss and irritate the newsposters, but in light of recent live proven exploits to disclose user IP & username pairs to remote servers, the broad list of embed hosts was unsustainable and impossible to prove safe. We extend is_safe_url to allow whitelisting subdomains, specifically to solve the s.lain.la open redirect exploit. Also, open media proxies like external-content.duckduckgo.com were concerning enough, despite likely being safe, to warrant removal. Anything infrequently used and difficult to review, or has a reasonable alternative, was also removed. In general: we want people to be rehosting, and if we want to allow more external content, we need to run a media proxy. The central issue is that any user-configurable 302 is a potential disclosure risk, and Lord knows how many ways there were to get <arbitrarynewssite>.com to do so. Maybe zero, but the problem is we just don't know. |
||
---|---|---|
chat | ||
files | ||
migrations | ||
.gitattributes | ||
.gitignore | ||
CODE_OF_CONDUCT.md | ||
Dockerfile | ||
LICENSE | ||
docker-compose.yml | ||
env | ||
gunicorn.conf.py | ||
imei.sh | ||
nginx-serve-static.conf | ||
nginx.conf | ||
pg_hba.conf | ||
readme.md | ||
requirements.txt | ||
schema.sql | ||
seed-db.sql | ||
snappy_PCM.txt | ||
snappy_rDrama.txt | ||
startup.sh | ||
startup_chat.sh | ||
startup_docker.sh | ||
supervisord.conf | ||
ubuntu_setup.sh |
readme.md
This code runs https://rdrama.net, https://pcmemes.net and https://watchpeopledie.tv
Installation (Windows/Linux/MacOS)
1- Install Docker on your machine. Docker installation
2- Run the following commands in the terminal:
git clone https://fsdfsd.net/rDrama/rDrama.git
cd rDrama
docker-compose down --rmi all --remove-orphans --volumes
docker-compose up
3- That's it! Visit localhost
in your browser and make an account (the first account to be made will have full admin rights)
4- Optional: to change the domain from "localhost" to something else and configure the site settings, as well as integrate it with the external services the website uses, edit the variables in the env
file and then restart the docker container.