mirrors/jellyseerr
1
0
Fork 0
mirror of https://github.com/fallenbagel/jellyseerr.git synced 2025-12-24 02:39:18 -05:00
Code Issues Packages Projects Releases Wiki Activity

fix: fix incomplete URL substring sanitization

Browse Source
This commit is contained in:
JoaquinOlivero
2024-08-28 14:21:07 +00:00
parent 14fdd4e293
commit cbf3bbb17d
3 changed files with 7 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
server/routes/auth.ts
View File

@@ -345,7 +345,7 @@ authRoutes.post('/jellyfin', async (req, res, next) => {
});
if (
user.avatar.startsWith('https://gravatar.com') &&
user.avatar.startsWith('https://gravatar.com/') &&
user.avatar.includes('default=mm&size=200')
) {
user.avatar = 'https://gravatar.com/avatar/?default=mm&size=200';
@@ -371,7 +371,7 @@ authRoutes.post('/jellyfin', async (req, res, next) => {
});
if (
user.avatar.startsWith('https://gravatar.com') &&
user.avatar.startsWith('https://gravatar.com/') &&
user.avatar.includes('default=mm&size=200')
) {
user.avatar = 'https://gravatar.com/avatar/?default=mm&size=200';
@@ -437,7 +437,7 @@ authRoutes.post('/jellyfin', async (req, res, next) => {
});
if (
avatar.startsWith('https://gravatar.com') &&
avatar.startsWith('https://gravatar.com/') &&
avatar.includes('default=mm&size=200')
) {
avatar = 'https://gravatar.com/avatar/?default=mm&size=200';
@@ -500,7 +500,7 @@ authRoutes.post('/jellyfin', async (req, res, next) => {
});
if (
user.avatar.startsWith('https://gravatar.com') &&
user.avatar.startsWith('https://gravatar.com/') &&
user.avatar.includes('default=mm&size=200')
) {
user.avatar = 'https://gravatar.com/avatar/?default=mm&size=200';

2
server/routes/avatarproxy.ts
View File

@@ -11,7 +11,7 @@ router.get('/*', async (req, res) => {
try {
if (
imagePath.startsWith('https://gravatar.com') &&
imagePath.startsWith('https://gravatar.com/') &&
imagePath.includes('default=mm&size=200')
) {
imagePath = 'https://gravatar.com/avatar/?default=mm&size=200';

4
server/routes/user/index.ts
View File

@@ -125,7 +125,7 @@ router.post(
let avatar = gravatarUrl(email, { default: 'mm', size: 200 });
if (
avatar.startsWith('https://gravatar.com') &&
avatar.startsWith('https://gravatar.com/') &&
avatar.includes('default=mm&size=200')
) {
avatar = 'https://gravatar.com/avatar/?default=mm&size=200';
@@ -565,7 +565,7 @@ router.post(
});
if (
newUser.avatar.startsWith('https://gravatar.com') &&
newUser.avatar.startsWith('https://gravatar.com/') &&
newUser.avatar.includes('default=mm&size=200')
) {
newUser.avatar = 'https://gravatar.com/avatar/?default=mm&size=200';