瀏覽代碼

Update SiteController, use url validator in redirect endpoint

Daniel Supernault 4 年之前
父節點
當前提交
10b178c8ee
共有 1 個文件被更改,包括 2 次插入0 次删除
  1. 2 0
      app/Http/Controllers/SiteController.php

+ 2 - 0
app/Http/Controllers/SiteController.php

@@ -9,6 +9,7 @@ use App\Util\Lexer\PrettyNumber;
 use App\{Follower, Page, Profile, Status, User, UserFilter};
 use App\Util\Localization\Localization;
 use App\Services\FollowerService;
+use App\Util\ActivityPub\Helpers;
 
 class SiteController extends Controller
 {
@@ -112,6 +113,7 @@ class SiteController extends Controller
             'url' => 'required|url'
         ]);
         $url = request()->input('url');
+        abort_if(Helpers::validateUrl($url) == false, 404);
         return view('site.redirect', compact('url'));
     }