lee/puter
1
0
Fork 0
mirror of https://github.com/HeyPuter/puter.git synced 2026-09-24 14:16:06 +00:00
Code Issues Actions 9 Packages Projects Releases Wiki Activity

dont forward data urls through cors proxy and fix core.validation (#2537)

Browse Source 
* exempt data urls from using cors proxy

* disallow unlimited use

* make core.validation defined again
This commit is contained in:
Neal Shah
2026-02-24 16:11:00 -05:00
committed by GitHub
parent 052e3f9dcb
commit 1e3193366a
2 changed files with 4 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/backend/src/CoreModule.js
+1 -1
View File
@@ -79,7 +79,7 @@ const install = async ({ context, services, app, useapi, modapi }) => {
def('core.fs.selectors', require('./filesystem/node/selectors'));
def('core.util.stream', require('./util/streamutil'));
def('web', require('./util/expressutil'));
def('core.validation', require('./validation').default);
def('core.validation', require('./validation'));
def('core.database', require('./services/database/consts.js'));
src/backend/src/util/securehttp.js
+3 -2
View File
@@ -192,7 +192,8 @@ async function secureAxiosRequest (axios, url, options = {}) {
};
try {
if ( globalThis.global_config.services.secureCorsProxy.url ) {
const parsedUrl = new URL(url);
if ( parsedUrl.protocol !== 'data:' && globalThis.global_config.services.secureCorsProxy.url ) {
url = globalThis.global_config.services.secureCorsProxy.url + url;
if ( ! secureOptions.headers ) {
secureOptions.headers = {};
@@ -212,7 +213,7 @@ async function secureAxiosRequest (axios, url, options = {}) {
}
// Log different information based on URL type
const parsedUrl = new URL(url);
if ( parsedUrl.protocol === 'data:' ) {
// Extract data format from data URL
const dataFormat = url.split(',')[0].split(':')[1] || 'unknown format';