sh-edraft.de/open-redirect
5
0
Fork 0
Code Issues 3 Pull Requests Actions Packages Projects Releases Wiki Activity

Added domain strict mode & reset versioning
All checks were successful
Build dev on push / build-api (push) Successful in 32s
Details
Build dev on push / build-redirector (push) Successful in 33s
Details
Build dev on push / build-web (push) Successful in 51s
Details

Browse Source
This commit is contained in:
Sven Heidemann 2025-01-16 18:07:11 +01:00
parent b71b68d2c3
commit f87b60f128
2 changed files with 5 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
api/src/redirector.py
View File

@ -36,12 +36,14 @@ async def _handle_request(path: str):
domains = Environment.get("DOMAINS", list[str], []) domains = Environment.get("DOMAINS", list[str], [])
domain = await short_url.domain domain = await short_url.domain
logger.debug(f"Domain: {domain}, request.host: {request.host}") logger.debug(f"Domain: {domain.name if domain is not None else None}, request.host: {request.host}")
host = request.host host = request.host
if ":" in host: if ":" in host:
host = host.split(":")[0] host = host.split(":")[0]
if host not in domains or domain is not None and domain.name not in domains:
domain_strict_mode = Environment.get("DOMAIN_STRICT_MODE", bool, False)
if domain is not None and (domain.name not in domains or (domain_strict_mode and not host.endswith(domain.name))):
return render_template("404.html"), 404 return render_template("404.html"), 404
user_agent = request.headers.get("User-Agent", "").lower() user_agent = request.headers.get("User-Agent", "").lower()

2
version.txt
View File

@ -1 +1 @@
1.2.3 1.2.0