snac2

commit 510bd60cdfd976d4493527faeb22a1d4c3328cc6
parent 4ab22b2c14cd0a94b05488d247b5669922415f5e
Author: grunfink <grunfink@noreply.codeberg.org>
Date:   Fri, 14 Jul 2023 05:23:44 +0000

Merge pull request 'html.c: Don't let public get into timeline.html_' (#67) from yonle/snac2:master into master

Reviewed-on: https://codeberg.org/grunfink/snac2/pulls/67

Diffstat:
M
html.c
 | 
6
+++++-

1 file changed, 5 insertions(+), 1 deletion(-)
diff --git a/html.c b/html.c
@@ -1843,7 +1843,11 @@ int html_get_handler(const xs_dict *req, const char *q_path,
         xs *l    = xs_split(p_path, "/");
         char *id = xs_list_get(l, 1);
 
-        if ((*body = history_get(&snac, id)) != NULL) {
+        if (xs_endswith(id, "timeline.html_")) {
+            // Don't let them in.
+            *b_size = 0;
+            status = 404;
+        } else if ((*body = history_get(&snac, id)) != NULL) {
             *b_size = strlen(*body);
             status  = 200;
         }