mirrors/ntfy
1
0
Fork 0
mirror of https://github.com/binwiederhier/ntfy.git synced 2025-04-06 22:47:38 +03:00
Code Issues Projects Releases Packages Wiki Activity

Disallow HEAD/GET requests with body

Browse source
This commit is contained in:
Philipp Heckel 2022-04-23 13:40:26 -04:00
parent 12f85cceb1
commit b805d49cfd
3 changed files with 24 additions and 11 deletions
Download patch file Download diff file Expand all files Collapse all files

2
server/server.go
View file

@ -539,7 +539,7 @@ func (s *Server) parsePublishParams(r *http.Request, v *visitor, m *message) (ca
if actionsStr != "" {
m.Actions, err = parseActions(actionsStr)
if err != nil {
return false, false, "", false, errHTTPBadRequestActionsInvalid
return false, false, "", false, err // wrapped errHTTPBadRequestActionsInvalid
}
}
unifiedpush = readBoolParam(r, false, "x-unifiedpush", "unifiedpush", "up") // see GET too!