cdransf/coryd.dev
1
1
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(*): refactor dynamic vs. static structure and distinctions; make additional elements dynamic

Browse source
This commit is contained in:
Cory Dransfeldt 2025-06-11 20:27:41 -07:00
parent ca57082f01
commit c021ea54ae
No known key found for this signature in database
140 changed files with 1001 additions and 985 deletions
Download patch file Download diff file Expand all files Collapse all files

5
api/query.php
View file

@ -1,7 +1,6 @@
<?php
require __DIR__ . "/../vendor/autoload.php";
require __DIR__ . '/../server/utils/init.php';
require_once __DIR__ . '/../bootstrap.php';
use App\Classes\BaseHandler;
@ -20,7 +19,7 @@ class QueryHandler extends BaseHandler
$referer = $_SERVER['HTTP_REFERER'] ?? '';
$hostAllowed = fn($url) => in_array(parse_url($url, PHP_URL_HOST), $allowedHosts, true);
if (!$hostAllowed($origin) && !$hostAllowed($referer)) $this->sendErrorResponse("Forbidden — invalid origin", 403);
if (!$hostAllowed($origin) && !$hostAllowed($referer)) $this->sendErrorResponse("Forbidden: invalid origin", 403);
$allowedSource = $origin ?: $referer;
$scheme = parse_url($allowedSource, PHP_URL_SCHEME) ?? 'https';