diff options
author | feld <feld@feld.me> | 2023-06-11 11:10:51 +0000 |
---|---|---|
committer | feld <feld@feld.me> | 2023-06-11 11:10:51 +0000 |
commit | 75900f21f064307974ad3d229f957970e3839d0c (patch) | |
tree | 017f384b350296060986c1ca95e683b06392fefa /lib | |
parent | 1db29f734f7f12a49ab946ea467b07bf27bdce6d (diff) | |
parent | 1ca1b4b32f2cba5f78a2d55645b8d2814bbfc593 (diff) | |
download | pleroma-75900f21f064307974ad3d229f957970e3839d0c.tar.gz pleroma-75900f21f064307974ad3d229f957970e3839d0c.zip |
Merge branch 'revert-mediaproxy-host-validation' into 'develop'
Revert MediaProxy Host header validation
See merge request pleroma/pleroma!3902
Diffstat (limited to 'lib')
-rw-r--r-- | lib/pleroma/web/media_proxy/media_proxy_controller.ex | 25 |
1 files changed, 0 insertions, 25 deletions
diff --git a/lib/pleroma/web/media_proxy/media_proxy_controller.ex b/lib/pleroma/web/media_proxy/media_proxy_controller.ex index 20f3a3438..bda5b36ed 100644 --- a/lib/pleroma/web/media_proxy/media_proxy_controller.ex +++ b/lib/pleroma/web/media_proxy/media_proxy_controller.ex @@ -12,7 +12,6 @@ defmodule Pleroma.Web.MediaProxy.MediaProxyController do alias Pleroma.Web.MediaProxy alias Plug.Conn - plug(:validate_host) plug(:sandbox) def remote(conn, %{"sig" => sig64, "url" => url64}) do @@ -206,30 +205,6 @@ defmodule Pleroma.Web.MediaProxy.MediaProxyController do Config.get([:media_proxy, :proxy_opts], []) end - defp validate_host(conn, _params) do - %{scheme: proxy_scheme, host: proxy_host, port: proxy_port} = - MediaProxy.base_url() |> URI.parse() - - if match?(^proxy_host, conn.host) do - conn - else - redirect_url = - %URI{ - scheme: proxy_scheme, - host: proxy_host, - port: proxy_port, - path: conn.request_path, - query: conn.query_string - } - |> URI.to_string() - |> String.trim_trailing("?") - - conn - |> Phoenix.Controller.redirect(external: redirect_url) - |> halt() - end - end - defp sandbox(conn, _params) do conn |> merge_resp_headers([{"content-security-policy", "sandbox;"}]) |