LibreY- privacy respecting meta search engine |
git clone git://git.acid.vegas/LibreY.git |
Log | Files | Refs | Archive | README | LICENSE |
commit 8f9b9803f231e2954e5b49987a532d28fe50a627
parent 3b23c4d099ecb6739da964a5113d09996087aec0 Author: Ahwx <ahwx@ahwx.org> Date: Tue, 29 Aug 2023 20:17:24 +0200 fix: vuln within image parsing (merge pull request #31 from codedipper/nibH3YzJ) irresponsible disclosure Diffstat:
|
2 files changed, 2 insertions(+), 8 deletions(-) | |
diff --git a/image_proxy.php b/image_proxy.php @@ -6,7 +6,7 @@ $url = $_REQUEST["url"]; $requested_root_domain = get_root_domain($url); - $allowed_domains = array("qwant.com", "wikimedia.org", get_root_domain($config->invidious_instance_for_video_results)); + $allowed_domains = array("s2.qwant.com", "s1.qwant.com", "upload.wikimedia.org", get_root_domain($config->invidious_instance_for_video_results)); if (in_array($requested_root_domain, $allowed_domains)) { |