mirror of https://gitgud.io/fatchan/jschan.git
You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
34 lines
997 B
34 lines
997 B
'use strict';
|
|
|
|
const config = require(__dirname+'/../../misc/config.js')
|
|
, dynamicResponse = require(__dirname+'/../../misc/dynamic.js')
|
|
, { addCallback } = require(__dirname+'/../../redis/redis.js');
|
|
|
|
let refererCheck, allowedHosts, allowedHostSet;
|
|
const updateReferers = () => {
|
|
({ refererCheck, allowedHosts } = config.get);
|
|
allowedHostSet = new Set(allowedHosts);
|
|
};
|
|
updateReferers();
|
|
addCallback('config', updateReferers);
|
|
|
|
module.exports = (req, res, next) => {
|
|
if (req.method !== 'POST') {
|
|
return next();
|
|
}
|
|
let validReferer = false;
|
|
try {
|
|
const url = new URL(req.headers.referer);
|
|
validReferer = allowedHostSet.has(url.hostname);
|
|
} catch(e) {
|
|
//referrer is invalid url
|
|
}
|
|
if (refererCheck === true && (!req.headers.referer || !validReferer)) {
|
|
const { __ } = res.locals;
|
|
return dynamicResponse(req, res, 403, 'message', {
|
|
'title': __('Forbidden'),
|
|
'message': __('Invalid or missing "Referer" header. Are you posting from the correct URL?'),
|
|
});
|
|
}
|
|
next();
|
|
};
|
|
|