PonyMirrors/philomena
1
0
Fork 0
mirror of https://github.com/philomena-dev/philomena.git synced 2024-11-27 13:47:58 +01:00
Code Issues Projects Releases Packages Wiki Activity

Use only hostname check in tor plug

Browse source
This commit is contained in:
byte[] 2023-03-30 12:44:12 -04:00
parent 9b98299db9
commit 3ff083f157
1 changed files with 3 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

7
lib/philomena_web/plugs/tor_plug.ex
View file

@ -19,18 +19,17 @@ defmodule PhilomenaWeb.TorPlug do
def call(conn, _opts) do
onion? = onion?(conn.host)
user = conn.assigns.current_user
ip = conn.remote_ip
maybe_redirect(conn, user, ip, onion?)
maybe_redirect(conn, user, onion?)
end
def maybe_redirect(conn, nil, {127, 0, 0, 1}, true) do
def maybe_redirect(conn, nil, true) do
conn
|> Controller.redirect(to: Routes.session_path(conn, :new))
|> Conn.halt()
end
def maybe_redirect(conn, _user, _ip, _onion?), do: conn
def maybe_redirect(conn, _user, _onion?), do: conn
# This is allowed, because nginx won't forward the request
# to the appserver if the hostname isn't in a specific list