novabbs
/
rocksolid-light
2
0
Fork 1
Code Issues 14 Pull Requests Releases Wiki Activity

Block preloading of Path or Injection-Info headers.

This commit is contained in:
Retro_Guy 2024-02-17 22:30:48 -07:00
parent 2c6c08c044
commit 4c58cb8b95
1 changed files with 8 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
Rocksolid_Light/rslight/scripts/rslight-lib.php
View File

@ -355,6 +355,14 @@ function process_post($message, $group)
$ref = 0;
$sub = 0;
}
if (stripos($line, "Path: ") === 0) {
$response = "441 Posting failed (Header preloading denied)\r\n";
return $response;
}
if (stripos($line, "Injection-Info: ") === 0) {
$response = "441 Posting failed (Header preloading denied)\r\n";
return $response;
}
if (stripos($line, "Date: ") === 0) {
$finddate = explode(': ', $line);
$article_date = strtotime($finddate[1]);