ngn/4get
1
0
Fork 0
Code Issues Pull Requests Actions Packages Activity

path traversal exploit fix from upstream
All checks were successful
Build and publish the docker image / build (push) Successful in 1m4s
Details

Browse Source 
Signed-off-by: ngn <ngn@ngn.tf>
This commit is contained in:
ngn 2025-03-09 04:31:02 +03:00
parent e9bbc0f307
commit 7a4806c5a3
Signed by: ngn
GPG Key ID: A3654DF5AD9F641D
1 changed files with 9 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
src/favicon.php
View File

@ -12,11 +12,16 @@ new favicon($_GET["s"]);
class favicon{ class favicon{
public function __construct($url){ public function __construct($url){
header("Content-Type: image/png"); header("Content-Type: image/png");
if(substr_count($url, "/") !== 2){ if(
preg_match(
'/^https?:\/\/[A-Za-z0-9.-]+$/',
$url
) === 0
){
header("X-Error: Only provide the protocol and domain"); header("X-Error: Only provide the protocol and domain");
$this->defaulticon(); $this->defaulticon();
} }