psi-jack/0x0
1
0
Fork 0
mirror of https://git.0x0.st/mia/0x0.git synced 2024-12-22 16:18:57 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions

add more URL validation

Browse source 
Turns out ShareX users and shell script authors are fucking retarded.
This commit is contained in:
Martin Herkt 2017-01-01 21:03:38 +01:00
parent 6bc7690711
commit 714de58180
No known key found for this signature in database
GPG key ID: C24B9CD04DC6AE7F
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
fhost.py
View file

@ -107,7 +107,7 @@ def shorten(url):
if len(url) > app.config["MAX_URL_LENGTH"]:
abort(414)
if not url_valid(url) or is_fhost_url(url):
if not url_valid(url) or is_fhost_url(url) or "\n" in url:
abort(400)
existing = URL.query.filter_by(url=url).first()