ui: typescript language features

packages/hydrooj/package.json

@@ -1,6 +1,6 @@
 {
     "name": "hydrooj",
-    "version": "2.24.17",
+    "version": "2.24.18",
     "bin": "bin/hydrooj.js",
     "main": "dist/loader.js",
     "typings": "dist/loader.d.ts",

packages/hydrooj/src/service/server.ts

@@ -482,6 +482,10 @@ export class Handler extends HandlerCommon {
     }
 
     async init({ domainId }) {
+        if (this.request.headers.referer) {
+            const hostname = new URL(this.request.headers.referer).hostname;
+            if (hostname !== this.request.hostname) throw new CsrfTokenError();
+        }
         if (!argv.benchmark) await this.limitRate('global', 10, 88);
         const [absoluteDomain, inferDomain, bdoc] = await Promise.all([
             domain.get(domainId),