diff options
| author | dakkar <dakkar@thenautilus.net> | 2025-01-02 10:03:16 +0000 |
|---|---|---|
| committer | dakkar <dakkar@thenautilus.net> | 2025-01-02 10:03:16 +0000 |
| commit | ac0c6841aa5a6f6da253235acb58d7f979dd520b (patch) | |
| tree | 0b118777a673a9efd32503c668e0703b44b460f3 /packages/backend/src/server/FileServerService.ts | |
| parent | merge: Add file extension to locally-stored media (!832) (diff) | |
| download | sharkey-ac0c6841aa5a6f6da253235acb58d7f979dd520b.tar.gz sharkey-ac0c6841aa5a6f6da253235acb58d7f979dd520b.tar.bz2 sharkey-ac0c6841aa5a6f6da253235acb58d7f979dd520b.zip | |
use the whole hostname to check remote links - fixes #866
the warning dialog's "trust this domain" toggle saves the whole
hostname, so this code needs to use the whole hostname
otherwise trusting a `www.example.com` will never work, because we'd
be checking `example.com` against it, and fail
while I was there, I also made the `trustedLinkUrlPatterns` correctly
match sub-domains: previously, trusting `ple.com` would trust
`example.com`
Diffstat (limited to 'packages/backend/src/server/FileServerService.ts')
0 files changed, 0 insertions, 0 deletions