From e8dfd7aa6b0aa37b2260e4593d475f25bbe2bdc4 Mon Sep 17 00:00:00 2001
From: Akshay Nair <phenax5@gmail.com>
Date: Sat, 26 Jul 2025 17:03:43 +0530
Subject: Add check for origin in nullrpc scheme handler

---
 src/schemes/NullRpcSchemeHandler.hpp | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/src/schemes/NullRpcSchemeHandler.hpp b/src/schemes/NullRpcSchemeHandler.hpp
index ef9cd09..b4bb216 100644
--- a/src/schemes/NullRpcSchemeHandler.hpp
+++ b/src/schemes/NullRpcSchemeHandler.hpp
@@ -16,10 +16,10 @@ public:
 
   void requestStarted(QWebEngineUrlRequestJob *job) override {
     auto url = job->requestUrl();
-    qDebug() << "REQ" << url << "From: " << job->initiator();
-    // TODO: Validate origin
+    auto origin = job->initiator();
+    qDebug() << "REQ" << url << " | From: " << job->initiator();
 
-    if (url.host().isEmpty() || url.host() == "noop") {
+    if (origin.scheme() != "nullrpc" || url.host().isEmpty() || url.host() == "noop") {
       job->reply("text/html", new QBuffer(job));
       return;
     }
-- 
cgit v1.3.1