Drop image host list for non-HTTPS archives.
This commit is contained in:
parent
0ad218f1e2
commit
1fec007b79
@ -92,8 +92,8 @@ class Fetcher
|
|||||||
{media} = response
|
{media} = response
|
||||||
if media then for key of media when /_link$/.test key
|
if media then for key of media when /_link$/.test key
|
||||||
# Image/thumbnail URLs loaded over HTTP can be modified in transit.
|
# Image/thumbnail URLs loaded over HTTP can be modified in transit.
|
||||||
# Require them to be from a known HTTP host so that no referrer is sent to them from an HTTPS page.
|
# Require them to be from an HTTP host so that no referrer is sent to them from an HTTPS page.
|
||||||
delete media[key] unless media[key]? and media[key].match(/^(http:\/\/[^\/]+\/)?/)[0] in archive.imagehosts
|
delete media[key] unless media[key]?.match /^http:\/\//
|
||||||
@parseArchivedPost response, url
|
@parseArchivedPost response, url
|
||||||
return true
|
return true
|
||||||
return false
|
return false
|
||||||
|
|||||||
Loading…
x
Reference in New Issue
Block a user