From 16ee0b368fcf24b48574172726e32a19c275d691 Mon Sep 17 00:00:00 2001
From: lolcat <will@lolcat.ca>
Date: Wed, 26 Jul 2023 19:03:06 -0400
Subject: felt quirky, might commit later

---
 lib/frontend.php | 17 ++++++++++++++++-
 1 file changed, 16 insertions(+), 1 deletion(-)

(limited to 'lib')

diff --git a/lib/frontend.php b/lib/frontend.php
index 3be912b..e03eb1d 100644
--- a/lib/frontend.php
+++ b/lib/frontend.php
@@ -143,7 +143,7 @@ class frontend{
 				
 				$payload .=
 					'">' .
-						'<img class="thumb" src="/proxy?i=' . urlencode($site["thumb"]["url"]) . '&s=' . $size . '" alt="thumb">';
+						'<img class="thumb" src="' . $this->htmlimage($site["thumb"]["url"], $size) . '" alt="thumb">';
 				
 				if($duration !== null){
 					
@@ -1273,6 +1273,21 @@ class frontend{
 		return http_build_query($out);
 	}
 	
+	public function htmlimage($image, $format){
+		
+		if(
+			preg_match(
+				'/^data:/',
+				$image
+			)
+		){
+			
+			return htmlspecialchars($image);
+		}
+		
+		return "/proxy.php?i=" . urlencode($image) . "&s=" . $format;
+	}
+	
 	public function htmlnextpage($gets, $npt, $page){
 		
 		$query = $this->buildquery($gets);
-- 
cgit v1.2.3