apunkt/imageproxy
1
0
Fork 0
mirror of https://github.com/willnorris/imageproxy.git synced 2026-04-28 22:36:25 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

Switch to Hostname() for checking whether a host is allowed or not (#238)

Browse source 
Using .Host allows you to get around an allowHosts or denyHosts entry by adding a port
This commit is contained in:
Blake Stoddard 2020-06-21 00:44:01 -04:00 • committed by GitHub
parent f91e9cb508
commit 0da684b81e
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
2 changed files with 5 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

2
imageproxy_test.go
View file

@ -170,9 +170,11 @@ func TestAllowed(t *testing.T) {
// deny requests that match denyHosts, even if signature is valid or also matches allowHosts
{"http://test/image", emptyOptions, nil, []string{"test"}, nil, nil, nil, false},
{"http://test:3000/image", emptyOptions, nil, []string{"test"}, nil, nil, nil, false},
{"http://test/image", emptyOptions, []string{"test"}, []string{"test"}, nil, nil, nil, false},
{"http://test/image", Options{Signature: "NDx5zZHx7QfE8E-ijowRreq6CJJBZjwiRfOVk_mkfQQ="}, nil, []string{"test"}, nil, key, nil, false},
{"http://127.0.0.1/image", emptyOptions, nil, []string{"127.0.0.0/8"}, nil, nil, nil, false},
{"http://127.0.0.1:3000/image", emptyOptions, nil, []string{"127.0.0.0/8"}, nil, nil, nil, false},
}
for _, tt := range tests {