Madeorsk/rudeshark.net
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

fix: exclude localhost

Browse Source
This commit is contained in:
Namekuji 2023-08-18 05:01:19 -04:00
parent 5520c6ff3d
commit cd75d65271
No known key found for this signature in database
GPG Key ID: 1D62332C07FBA532
1 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
packages/backend/src/services/drive/upload-from-url.ts
View File

@ -41,7 +41,8 @@ export async function uploadFromUrl({
const parsedUrl = new URL(url); const parsedUrl = new URL(url);
if ( if (
process.env.NODE_ENV === "production" && process.env.NODE_ENV === "production" &&
PRIVATE_IP.test(parsedUrl.hostname) (PRIVATE_IP.test(parsedUrl.hostname) ||
parsedUrl.hostname.includes("localhost"))
) { ) {
throw new Error("Private IP is not allowed"); throw new Error("Private IP is not allowed");
} }