valvin
/
ttrss
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

af_zz_imgproxy: implement a whitelist of known sites that have optional SSL

This commit is contained in:
Andrew Dolgov 2017-04-20 09:09:00 +03:00
parent b8f23d6848
commit ecab435420
1 changed files with 13 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
plugins/af_zz_imgproxy/init.php
View File

@ -8,6 +8,8 @@ class Af_Zz_ImgProxy extends Plugin {
"fox"); "fox");
} }
private $ssl_known_whitelist = "imgur.com i.reddituploads.com pbs.twimg.com i.redd.it i.sli.mg media.tumblr.com";
function is_public_method($method) { function is_public_method($method) {
return $method === "imgproxy"; return $method === "imgproxy";
} }
@ -119,7 +121,17 @@ class Af_Zz_ImgProxy extends Plugin {
if (($scheme != 'https' && $scheme != "") || $is_remote) { if (($scheme != 'https' && $scheme != "") || $is_remote) {
if (strpos($url, "data:") !== 0) { if (strpos($url, "data:") !== 0) {
$url = get_self_url_prefix() . "/public.php?op=pluginhandler&plugin=af_zz_imgproxy&pmethod=imgproxy&url=" . $parts = parse_url($url);
foreach (explode(" " , $this->ssl_known_whitelist) as $host) {
if (strpos($parts['host'], $host) !== FALSE) {
$parts['scheme'] = 'https';
return build_url($parts);
}
}
return get_self_url_prefix() . "/public.php?op=pluginhandler&plugin=af_zz_imgproxy&pmethod=imgproxy&url=" .
urlencode($url); urlencode($url);
} }
} }