external-repos/ivatar
1
0
Fork 0
mirror of https://git.linux-kernel.at/oliver/ivatar.git synced 2025-11-16 13:08:03 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix: resolve backward compability in config

Browse Source
This commit is contained in:
Seth Falco
2022-09-15 17:03:06 +00:00
committed by Oliver Falk
parent 2695f932ee
commit cf65ea2c6a
4 changed files with 55 additions and 20 deletions
Download Patch File Download Diff File Expand all files Collapse all files

23
ivatar/views.py
View File

@@ -141,18 +141,19 @@ class AvatarImageView(TemplateView):
if "default" in request.GET:
default = request.GET["default"]
# Check if default starts with an URL scheme and if it does,
# check if it's trusted
# Check for :// (schema)
if default is not None and default.find("://") > 0:
# Check if it's trusted, if not, reset to None
trusted_url = is_trusted_url(default, TRUSTED_DEFAULT_URLS)
if not trusted_url:
print(
"Default URL is not in trusted URLs: '%s' ; Kicking it!" % default
)
if default is not None:
if TRUSTED_DEFAULT_URLS is None:
print("Query parameter `default` is disabled.")
default = None
elif default.find("://") > 0:
# Check if it's trusted, if not, reset to None
trusted_url = is_trusted_url(default, TRUSTED_DEFAULT_URLS)
if not trusted_url:
print(
"Default URL is not in trusted URLs: '%s' ; Kicking it!" % default
)
default = None
if "f" in request.GET:
if request.GET["f"] == "y":