diff options
| author | Akshay Nair <phenax5@gmail.com> | 2025-07-26 17:03:43 +0530 |
|---|---|---|
| committer | Akshay Nair <phenax5@gmail.com> | 2025-07-26 17:03:43 +0530 |
| commit | e8dfd7aa6b0aa37b2260e4593d475f25bbe2bdc4 (patch) | |
| tree | 273852893ff7cbe6bb1bbe5304cff1cfb8502dbb | |
| parent | b0f598910f1f8bc8db6b65a0f01b1950ed7c3841 (diff) | |
| download | null-browser-e8dfd7aa6b0aa37b2260e4593d475f25bbe2bdc4.tar.gz null-browser-e8dfd7aa6b0aa37b2260e4593d475f25bbe2bdc4.zip | |
Add check for origin in nullrpc scheme handler
| -rw-r--r-- | src/schemes/NullRpcSchemeHandler.hpp | 6 |
1 files changed, 3 insertions, 3 deletions
diff --git a/src/schemes/NullRpcSchemeHandler.hpp b/src/schemes/NullRpcSchemeHandler.hpp index ef9cd09..b4bb216 100644 --- a/src/schemes/NullRpcSchemeHandler.hpp +++ b/src/schemes/NullRpcSchemeHandler.hpp @@ -16,10 +16,10 @@ public: void requestStarted(QWebEngineUrlRequestJob *job) override { auto url = job->requestUrl(); - qDebug() << "REQ" << url << "From: " << job->initiator(); - // TODO: Validate origin + auto origin = job->initiator(); + qDebug() << "REQ" << url << " | From: " << job->initiator(); - if (url.host().isEmpty() || url.host() == "noop") { + if (origin.scheme() != "nullrpc" || url.host().isEmpty() || url.host() == "noop") { job->reply("text/html", new QBuffer(job)); return; } |