Fix origin check

This commit is contained in:
Kieran 2023-11-03 01:24:55 +09:00
parent 72047a5098
commit 3f373e6ca3
Signed by: Kieran
GPG Key ID: DE71CEB3925BE941

View File

@ -111,7 +111,7 @@ public class DownloadController : Controller
private async Task<VoidFileResponse?> SetupDownload(Guid id)
{
var origin = Request.Headers.Origin.FirstOrDefault();
var origin = Request.Headers.Referer.FirstOrDefault() ?? Request.Headers.Origin.FirstOrDefault();
if (!string.IsNullOrEmpty(origin) && Uri.TryCreate(origin, UriKind.RelativeOrAbsolute, out var u))
{
if (_settings.BlockedOrigins.Any(a => string.Equals(a, u.DnsSafeHost, StringComparison.InvariantCultureIgnoreCase)))