GithubBackup/MoviePilot
1
0
Fork 0
mirror of https://github.com/jxxghp/MoviePilot.git synced 2026-09-04 23:17:20 +08:00
Code Issues Packages Projects Releases Wiki Activity

Revert "fix is_safe_url"

Browse Source 
This reverts commit 5e2ad34864.
This commit is contained in:
InfinityPacer
2025-02-10 02:22:53 +08:00
parent 7df07b86b9
commit e48c8ee652
1 changed files with 1 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
app/utils/security.py
+1 -2
View File
@@ -65,7 +65,6 @@ class SecurityUtils:
netloc = parsed_url.netloc.lower() netloc = parsed_url.netloc.lower()
if not netloc: if not netloc:
return False return False
netloc_no_port = netloc.split(":")[0]
# 检查每个允许的域名 # 检查每个允许的域名
allowed_domains = {d.lower() for d in allowed_domains} allowed_domains = {d.lower() for d in allowed_domains}
@@ -79,7 +78,7 @@ class SecurityUtils:
return True return True
else: else:
# 非严格模式下，允许子域名匹配 # 非严格模式下，允许子域名匹配
if netloc_no_port == allowed_netloc or netloc_no_port.endswith('.' + allowed_netloc): if netloc == allowed_netloc or netloc.endswith('.' + allowed_netloc):
return True return True
return False return False