diff --git a/config/site.example.php b/config/site.example.php index 3ad1765..b1bf3ae 100644 --- a/config/site.example.php +++ b/config/site.example.php @@ -9,6 +9,7 @@ return array ( 'site_name' => 'PonePaste', 'email' => '' ), + 'allowed_image_hosts' => array(), 'interface' => array ( 'language' => 'en', @@ -19,16 +20,6 @@ return array ( 'disable_guest' => false, 'private' => false, ), - 'mail' => - array ( - 'verification' => false, - 'smtp_host' => '', - 'smtp_port' => '', - 'smtp_user' => '', - 'socket' => '', - 'auth' => '', - 'protocol' => '', - ), 'captcha' => array ( 'enabled' => true, diff --git a/includes/common.php b/includes/common.php index a21a399..a0e8f5d 100644 --- a/includes/common.php +++ b/includes/common.php @@ -292,4 +292,4 @@ $script_bundles = []; /* Security headers */ header('X-Frame-Options: SAMEORIGIN'); header('X-Content-Type-Options: nosniff'); -header("Content-Security-Policy: default-src 'self' data: 'unsafe-inline'"); +header("Content-Security-Policy: default-src 'self' data: 'unsafe-inline'; img-src " . implode(' ', $site_info['allowed_image_hosts'])); diff --git a/public/admin/configuration.php b/public/admin/configuration.php index 5efc976..07af5c0 100644 --- a/public/admin/configuration.php +++ b/public/admin/configuration.php @@ -23,8 +23,8 @@ function updateConfiguration(string $path, array $new_config) : void { $current_config = require(CONFIG_FILE_PATH); $current_site_info = $current_config['site_info']; +$current_allowed_image_hosts = $current_config['allowed_image_hosts']; $current_permissions = $current_config['permissions']; -$current_mail = $current_config['mail']; $current_captcha = $current_config['captcha']; /* Update the configuration if necessary */ @@ -48,6 +48,17 @@ if ($_SERVER['REQUEST_METHOD'] === 'POST') { $msg = '
Configuration saved.
'; + } elseif ($action === 'allowed_image_hosts') { + $new_allowed_image_hosts = array_filter($_POST['allowed_image_hosts'], function ($host) { + return !empty($host); + }); + $current_config['allowed_image_hosts'] = $new_allowed_image_hosts; + $current_allowed_image_hosts = $new_allowed_image_hosts; + + updateConfiguration(CONFIG_FILE_PATH, $current_config); + $msg = '
+ Allowed image hosts saved. +
'; } elseif ($action === 'permissions') { $new_permissions = [ 'disable_guest' => trim($_POST['disableguest']), @@ -89,6 +100,9 @@ if ($_SERVER['REQUEST_METHOD'] === 'POST') { Paste - Configuration + @@ -103,7 +117,7 @@ if ($_SERVER['REQUEST_METHOD'] === 'POST') {