mirror of
https://gitlab.com/fdroid/fdroidserver.git
synced 2024-09-17 18:50:11 +02:00
checkupdates: require UpdateCheckData has valid HTTPS URL
This commit is contained in:
parent
26bfd7fb28
commit
7da0747849
@ -30,6 +30,7 @@ import html
|
|||||||
from distutils.version import LooseVersion
|
from distutils.version import LooseVersion
|
||||||
import logging
|
import logging
|
||||||
import copy
|
import copy
|
||||||
|
import urllib.parse
|
||||||
|
|
||||||
from . import _
|
from . import _
|
||||||
from . import common
|
from . import common
|
||||||
@ -48,6 +49,13 @@ def check_http(app):
|
|||||||
raise FDroidException('Missing Update Check Data')
|
raise FDroidException('Missing Update Check Data')
|
||||||
|
|
||||||
urlcode, codeex, urlver, verex = app.UpdateCheckData.split('|')
|
urlcode, codeex, urlver, verex = app.UpdateCheckData.split('|')
|
||||||
|
parsed = urllib.parse.urlparse(urlcode)
|
||||||
|
if not parsed.netloc or not parsed.scheme or parsed.scheme != 'https':
|
||||||
|
raise FDroidException(_('UpdateCheckData has invalid URL: {url}').format(url=urlcode))
|
||||||
|
if urlver != '.':
|
||||||
|
parsed = urllib.parse.urlparse(urlver)
|
||||||
|
if not parsed.netloc or not parsed.scheme or parsed.scheme != 'https':
|
||||||
|
raise FDroidException(_('UpdateCheckData has invalid URL: {url}').format(url=urlcode))
|
||||||
|
|
||||||
vercode = "99999999"
|
vercode = "99999999"
|
||||||
if len(urlcode) > 0:
|
if len(urlcode) > 0:
|
||||||
|
Loading…
Reference in New Issue
Block a user