iv-org-mirror/invidious-copy-2022-08-14
1
0
Fork 0
mirror of https://gitea.invidious.io/iv-org/invidious-copy-2022-08-14.git synced 2024-08-15 00:53:20 +00:00
Code Issues Projects Releases Packages Wiki Activity

Merge pull request #2891 from SamantazFox/check-host-param

Browse source 
video_playback: Check "host" parameter validity
This commit is contained in:
Samantaz Fox 2022-02-11 05:16:47 +01:00 committed by GitHub
commit ec183e3c9a
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 8 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

10
src/invidious/routes/video_playback.cr
View file

@ -14,12 +14,18 @@ module Invidious::Routes::VideoPlayback
end end
if query_params["host"]? && !query_params["host"].empty? if query_params["host"]? && !query_params["host"].empty?
host = "https://#{query_params["host"]}" host = query_params["host"]
query_params.delete("host") query_params.delete("host")
else else
host = "https://r#{fvip}---#{mns.pop}.googlevideo.com" host = "r#{fvip}---#{mns.pop}.googlevideo.com"
end end
# Sanity check, to avoid being used as an open proxy
if !host.matches?(/[\w-]+.googlevideo.com/)
return error_template(400, "Invalid \"host\" parameter.")
end
host = "https://#{host}"
url = "/videoplayback?#{query_params}" url = "/videoplayback?#{query_params}"
headers = HTTP::Headers.new headers = HTTP::Headers.new