mirror of
https://github.com/benbusby/whoogle-search.git
synced 2026-03-10 20:03:51 -04:00
3a2e0b262e
Domains were previously not validated before being handled, leading to a potential scenario where someone could pass something like "element_url=127.0.0.1:<port>/<resource>" to access other resources on a machine running Whoogle. This change ensures that the resource used in both endpoints is a valid domain. This also includes validation of config names to prevent names from including path values such as "../../(etc)".