Madiator2011/lbry-sdk
1
0
Fork 0
forked from LBRYCommunity/lbry-sdk
Code Pull requests Activity

block api calls from bad origins

Browse source
This commit is contained in:
Jack 2016-09-14 17:39:04 -04:00
parent 1215470cc1
commit 6ea1f6f78c
1 changed files with 5 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
lbrynet/lbrynet_daemon/LBRYDaemon.py
View file

@ -394,6 +394,11 @@ class LBRYDaemon(jsonrpc.JSONRPC):
log.debug(err.getTraceback()) log.debug(err.getTraceback())
def render(self, request): def render(self, request):
origin = request.getHeader("Origin")
if origin not in [None, 'http://localhost:5279']:
log.warning("Attempted api call from %s", origin)
return server.failure
request.content.seek(0, 0) request.content.seek(0, 0)
# Unmarshal the JSON-RPC data. # Unmarshal the JSON-RPC data.
content = request.content.read() content = request.content.read()