heckyel/yt-local
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Add hidden setting to allow foreign post requests

Browse Source 
See #55

Signed-off-by: Jesús <heckyel@hyperbola.info>
This commit is contained in:
James Taylor 2021-03-08 21:33:23 -08:00 committed by Jesús
parent e549b5f67c
commit 585d724564
No known key found for this signature in database
GPG Key ID: F6EE7BC59A315766
2 changed files with 12 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
server.py
View File

@ -204,7 +204,9 @@ def site_dispatch(env, start_response):
method = env['REQUEST_METHOD'] method = env['REQUEST_METHOD']
path = env['PATH_INFO'] path = env['PATH_INFO']
if method == "POST" and client_address not in ('127.0.0.1', '::1'): if (method == "POST"
and client_address not in ('127.0.0.1', '::1')
and not settings.allow_foreign_post_requests):
yield error_code('403 Forbidden', start_response) yield error_code('403 Forbidden', start_response)
return return

9
settings.py
View File

@ -53,6 +53,15 @@ For security reasons, enabling this is not recommended.''',
'category': 'network', 'category': 'network',
}), }),
('allow_foreign_post_requests', {
'type': bool,
'default': False,
'comment': '''Enables requests from foreign addresses to make post requests.
For security reasons, enabling this is not recommended.''',
'hidden': True,
'category': 'network',
}),
('subtitles_mode', { ('subtitles_mode', {
'type': int, 'type': int,
'default': 0, 'default': 0,