Itmens/lib.itmens
Itmens/lib.itmens
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 3

fix loophole when MASTODON_ALLOW_ANY_SITE is off

Browse source
This commit is contained in:
Your Name 2021-09-18 12:09:45 -04:00
parent b4e3dda09e
commit cbe4555dfd
1 changed files with 2 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
users/views.py
View file

@ -98,6 +98,8 @@ def login(request):
return HttpResponseBadRequest()
def connect(request):
if not settings.MASTODON_ALLOW_ANY_SITE:
return redirect(reverse("users:login"))
domain = request.GET.get('domain').strip().lower()
app = MastodonApplication.objects.filter(domain_name=domain).first()
if app is None: