Korbs/poke
Korbs/poke
1
Fork 0
Code Activity

:3

Browse source
This commit is contained in:
ashley 2024-06-17 13:53:54 +00:00
parent 904d6e79b2
commit d06ac6a18e
1 changed files with 1 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
p/server.js
View file

@ -73,6 +73,7 @@ const proxy = async (req, res) => {
return res.status(400).send("Malformed URL");
}
// Sanity check, to avoid being used as an open proxy
if (!URL_WHITELIST.includes(url.host)) {
console.log(`==> Refusing to proxy host ${url.host}`);
res.status(401).send(`Hostname '${url.host}' is not permitted`);