X-Git-Url: http://git.squeep.com/?a=blobdiff_plain;f=lib%2Fpleroma%2Fweb%2Fmedia_proxy%2Fmedia_proxy.ex;h=37718f48bb677e07f236d6946581071da4617cee;hb=947431e9aa1d4dbf85f9ccc270f1989737744ed4;hp=21ebdfbbc13fcb2a51c3c05deed89714891b6fbc;hpb=9093b2cf4923274572729f46b688ab12f5a0bfdc;p=akkoma diff --git a/lib/pleroma/web/media_proxy/media_proxy.ex b/lib/pleroma/web/media_proxy/media_proxy.ex index 21ebdfbbc..37718f48b 100644 --- a/lib/pleroma/web/media_proxy/media_proxy.ex +++ b/lib/pleroma/web/media_proxy/media_proxy.ex @@ -3,16 +3,19 @@ defmodule Pleroma.Web.MediaProxy do def url(nil), do: nil + def url(url = "/" <> _), do: url + def url(url) do config = Application.get_env(:pleroma, :media_proxy, []) - if !Keyword.get(config, :enabled, false) or String.starts_with?(url, Pleroma.Web.base_url) do + + if !Keyword.get(config, :enabled, false) or String.starts_with?(url, Pleroma.Web.base_url()) do url else secret = Application.get_env(:pleroma, Pleroma.Web.Endpoint)[:secret_key_base] base64 = Base.url_encode64(url, @base64_opts) sig = :crypto.hmac(:sha, secret, base64) sig64 = sig |> Base.url_encode64(@base64_opts) - Keyword.get(config, :base_url, Pleroma.Web.base_url) <> "/proxy/#{sig64}/#{base64}" + Keyword.get(config, :base_url, Pleroma.Web.base_url()) <> "/proxy/#{sig64}/#{base64}" end end @@ -20,11 +23,11 @@ defmodule Pleroma.Web.MediaProxy do secret = Application.get_env(:pleroma, Pleroma.Web.Endpoint)[:secret_key_base] sig = Base.url_decode64!(sig, @base64_opts) local_sig = :crypto.hmac(:sha, secret, url) + if local_sig == sig do {:ok, Base.url_decode64!(url, @base64_opts)} else {:error, :invalid_signature} end end - end