From b425cdcb4e7939e1369b5c12bd4f4e3336e907d0 Mon Sep 17 00:00:00 2001 From: mutantmonkey Date: Fri, 9 Oct 2015 23:30:26 -0700 Subject: [PATCH] use strict referrer check for remote uploads too --- upload.go | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/upload.go b/upload.go index aaf5f0b..419dc05 100644 --- a/upload.go +++ b/upload.go @@ -138,6 +138,11 @@ func uploadPutHandler(c web.C, w http.ResponseWriter, r *http.Request) { } func uploadRemote(c web.C, w http.ResponseWriter, r *http.Request) { + if !strictReferrerCheck(r, Config.siteURL, []string{"Linx-Delete-Key", "Linx-Expiry", "Linx-Randomize"}) { + badRequestHandler(c, w, r) + return + } + if r.FormValue("url") == "" { http.Redirect(w, r, "/", 301) return