From d06ac6a18ed0d9b791c242e3f41981b2e42ed68b Mon Sep 17 00:00:00 2001 From: ashley Date: Mon, 17 Jun 2024 13:53:54 +0000 Subject: [PATCH] :3 --- p/server.js | 1 + 1 file changed, 1 insertion(+) diff --git a/p/server.js b/p/server.js index 6b2de826..0fc221e2 100644 --- a/p/server.js +++ b/p/server.js @@ -73,6 +73,7 @@ const proxy = async (req, res) => { return res.status(400).send("Malformed URL"); } + // Sanity check, to avoid being used as an open proxy if (!URL_WHITELIST.includes(url.host)) { console.log(`==> Refusing to proxy host ${url.host}`); res.status(401).send(`Hostname '${url.host}' is not permitted`);