Weishen/Hydro
2
0 Fork 0
mirror of https://gitcode.com/gh_mirrors/hy/Hydro.git synced 2026-10-20 01:38:19 +08:00
Code Issues Packages Projects Releases Wiki Activity

core: handle CsrfTokenError and DomainNotFoundError

Browse Source
This commit is contained in:
undefined committed 2022-11-14 20:20:00 +08:00
1 parent 00f83d805a
commit 3371f39ef4
2 files changed
+6 -2
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

packages/hydrooj/src/service/layers/user.ts
+5 -2
View File
@@ -17,10 +17,13 @@ export default async (ctx: KoaContext, next) => {
if (user._id === 0) delete user.viewLang;
user.avatarUrl = avatar(user.avatar, 128);
ctx.HydroContext.user = user;
if (!domain) throw new NotFoundError(args.domainId);
if (!domain) {
ctx.pendingError = new NotFoundError(args.domainId);
args.domainId = 'system';
}
if (request.method === 'post' && request.headers.referer) {
const host = new URL(request.headers.referer).host;
if (host !== request.host) throw new CsrfTokenError(host);
if (host !== request.host) ctx.pendingError = new CsrfTokenError(host);
}
await next();
};