mirror of https://github.com/rocboss/paopao-ce
You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
35 lines
722 B
35 lines
722 B
2 years ago
|
// Copyright 2022 ROC. All rights reserved.
|
||
|
|
// Use of this source code is governed by a MIT style
|
||
|
|
// license that can be found in the LICENSE file.
|
||
|
|
|
||
|
3 years ago
|
package security
|
||
|
|
|
||
|
|
import (
|
||
|
|
"fmt"
|
||
|
|
"strings"
|
||
|
|
|
||
|
|
"github.com/rocboss/paopao-ce/internal/conf"
|
||
|
|
"github.com/rocboss/paopao-ce/internal/core"
|
||
|
|
)
|
||
|
|
|
||
|
2 years ago
|
var (
|
||
|
|
_ core.AttachmentCheckService = (*attachmentCheckServant)(nil)
|
||
|
|
)
|
||
|
|
|
||
|
3 years ago
|
type attachmentCheckServant struct {
|
||
|
|
domain string
|
||
|
|
}
|
||
|
|
|
||
|
|
func (s *attachmentCheckServant) CheckAttachment(uri string) error {
|
||
|
|
if strings.Index(uri, s.domain) != 0 {
|
||
|
|
return fmt.Errorf("附件非本站资源")
|
||
|
|
}
|
||
|
|
return nil
|
||
|
|
}
|
||
|
|
|
||
|
|
func NewAttachmentCheckService() core.AttachmentCheckService {
|
||
|
|
return &attachmentCheckServant{
|
||
|
|
domain: conf.GetOssDomain(),
|
||
|
|
}
|
||
|
|
}
|