From 9d40d02ea73a0ae33261a1fffdd324ca227b2852 Mon Sep 17 00:00:00 2001
From: Ryan Stafford <ryan@nanorex.net>
Date: Wed, 28 Feb 2024 06:16:43 -0500
Subject: [PATCH] disable /link rewrite. fixes #101

---
 routes.go | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/routes.go b/routes.go
index ef80700..4f4f11d 100644
--- a/routes.go
+++ b/routes.go
@@ -156,7 +156,7 @@ var funcMap = template.FuncMap{
 		if host != "." {
 			body = RegReplace(body, `href="/`, `href="./`)
 		}
-		body = RegReplace(body, `href="(https:\/\/[a-zA-Z0-9\.\-]+\/(c|u|comment|post)\/[^#\?]*?)"`, `href="/`+host+`/link?url=$1"`)
+		//body = RegReplace(body, `href="(https:\/\/[a-zA-Z0-9\.\-]+\/(c|u|comment|post)\/[^#\?]*?)"`, `href="/`+host+`/link?url=$1"`)
 		body = RegReplace(body, `::: ?spoiler (.*?)\n([\S\s]*?):::`, "<details><summary>$1</summary>$2</details>")
 		return template.HTML(body)
 	},
@@ -1490,6 +1490,12 @@ func UserOp(w http.ResponseWriter, r *http.Request, ps httprouter.Params) {
 	http.Redirect(w, r, r.URL.String(), 301)
 }
 func GetLink(w http.ResponseWriter, r *http.Request, ps httprouter.Params) {
+	ref, _ := url.Parse(r.Referer())
+	if r.Host != ref.Host {
+		w.WriteHeader(http.StatusBadRequest)
+		w.Write([]byte("Invalid Referer"))
+		return
+	}
 	var dest *url.URL
 	m, _ := url.ParseQuery(r.URL.RawQuery)
 	if len(m["url"]) > 0 {