commit 084d69fdc0750491c180764a02779aa1a90ad92f · nekomimi.pet/microcosm-rs

nekomimi.pet / microcosm-rs

forked from microcosm.blue/microcosm-rs

Constellation, Spacedust, Slingshot, UFOs: atproto crates and services for microcosm

fork atom

restrict app param

bad-example.com 5 months ago 084d69fd 27995605

options

unified split

Changed files

who-am-i

src

server.rs

who-am-i/src/server.rs

···

       268
       268
        
                   Some(parent_host),

     

       269
       269
        
               );

     

       270
       270
        
           }

     

       271
       271
       +
           if let Some(ref app) = params.app {

     

       272
       272
       +
               if !allowed_hosts.contains(app) {

     

       273
       273
       +
                   return err("Login is not allowed for this app", false, Some(app));

     

       274
       274
       +
               }

     

       275
       275
       +
           }

     

       271
       276
        
           let parent_origin = url.origin().ascii_serialization();

     

       272
       277
        
           if parent_origin == "null" {

     

       273
       278
        
               return err("Origin or referrer header value is opaque", true, None);