Nikurasu/elk
1
0
Fork 0
forked from Mirrors/elk
Code Pull requests Releases 2 Packages 1 Activity

reject http urls

Browse source
This commit is contained in:
Shinigami92 2022-12-12 22:13:23 +01:00
parent 174b2b2d83
commit a650b1f369
1 changed files with 8 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
server/api/og-image/[url].ts
View file

@ -76,6 +76,14 @@ export default defineEventHandler(async (event) => {
} }
} }
if (!ogImageUrl.startsWith('https')) {
// If the og:image is not https, we can't use it
throw createError({
statusCode: 406,
statusMessage: 'og:image must be https.',
})
}
if (!ogImageUrl) { if (!ogImageUrl) {
// If nothing helped, send 404 so the srcset can fallback to the default image // If nothing helped, send 404 so the srcset can fallback to the default image
throw createError({ throw createError({