From 1fec007b79e0436ab30dd56bcc45f8189175c968 Mon Sep 17 00:00:00 2001 From: ccd0 Date: Sun, 1 Nov 2015 03:27:25 -0800 Subject: [PATCH] Drop image host list for non-HTTPS archives. --- src/General/lib/fetcher.class | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/src/General/lib/fetcher.class b/src/General/lib/fetcher.class index 85723cc0f..c4e791fcf 100644 --- a/src/General/lib/fetcher.class +++ b/src/General/lib/fetcher.class @@ -92,8 +92,8 @@ class Fetcher {media} = response if media then for key of media when /_link$/.test key # Image/thumbnail URLs loaded over HTTP can be modified in transit. - # Require them to be from a known HTTP host so that no referrer is sent to them from an HTTPS page. - delete media[key] unless media[key]? and media[key].match(/^(http:\/\/[^\/]+\/)?/)[0] in archive.imagehosts + # Require them to be from an HTTP host so that no referrer is sent to them from an HTTPS page. + delete media[key] unless media[key]?.match /^http:\/\// @parseArchivedPost response, url return true return false