fedi/mastodon
1
0
Fork 1
mirror of https://github.com/mastodon/mastodon.git synced 2024-11-10 09:29:18 +00:00
Code Issues Packages Projects Releases Wiki Activity

Skip remote media URLs that don't have a hostname

Browse source
This commit is contained in:
Eugen Rochko 2017-02-22 19:55:14 +01:00
parent 3202bdd744
commit 53ae431867
2 changed files with 4 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
app/models/account.rb
View file

@ -138,7 +138,7 @@ class Account < ApplicationRecord
def avatar_remote_url=(url)
parsed_url = URI.parse(url)
return if !%w(http https).include?(parsed_url.scheme) || self[:avatar_remote_url] == url
return if !%w(http https).include?(parsed_url.scheme) || parsed_url.host.empty? || self[:avatar_remote_url] == url
self.avatar = parsed_url
self[:avatar_remote_url] = url

3
app/services/process_feed_service.rb
View file

@ -181,6 +181,9 @@ class ProcessFeedService < BaseService
next unless link['href']
media = MediaAttachment.where(status: parent, remote_url: link['href']).first_or_initialize(account: parent.account, status: parent, remote_url: link['href'])
parsed_url = URI.parse(link['href'])
next if !%w(http https).include?(parsed_url.scheme) || parsed_url.host.empty?
begin
media.file_remote_url = link['href']