diff options
| author | Julia Johannesen <julia@insertdomain.name> | 2025-04-27 13:05:09 -0400 |
|---|---|---|
| committer | Julia Johannesen <julia@insertdomain.name> | 2025-04-27 13:05:09 -0400 |
| commit | 0bb4e57b0c646a20aa46e6cac545b37682629e89 (patch) | |
| tree | cae0d041c41353c1c8a9e8616abc3f609de87194 /packages/backend/src/server | |
| parent | merge: 2025.2.2 (!927) (diff) | |
| download | sharkey-0bb4e57b0c646a20aa46e6cac545b37682629e89.tar.gz sharkey-0bb4e57b0c646a20aa46e6cac545b37682629e89.tar.bz2 sharkey-0bb4e57b0c646a20aa46e6cac545b37682629e89.zip | |
Security fixes
Co-Authored-By: dakkar <dakkar@thenautilus.net>
Diffstat (limited to 'packages/backend/src/server')
| -rw-r--r-- | packages/backend/src/server/web/UrlPreviewService.ts | 10 |
1 files changed, 4 insertions, 6 deletions
diff --git a/packages/backend/src/server/web/UrlPreviewService.ts b/packages/backend/src/server/web/UrlPreviewService.ts index 19dac1dfb8..f2a93e0958 100644 --- a/packages/backend/src/server/web/UrlPreviewService.ts +++ b/packages/backend/src/server/web/UrlPreviewService.ts @@ -52,12 +52,10 @@ export class UrlPreviewService { @bindThis private wrap(url?: string | null): string | null { return url != null - ? url.match(/^https?:\/\//) - ? `${this.config.mediaProxy}/preview.webp?${query({ - url, - preview: '1', - })}` - : url + ? `${this.config.mediaProxy}/preview.webp?${query({ + url, + preview: '1', + })}` : null; } |