1f349/bluebell
4
0
Fork 0
mirror of https://github.com/1f349/site-hosting.git synced 2025-04-14 07:36:05 +01:00
Code Issues Packages Projects Releases Wiki Activity

Only allow GET requests in the serve handler

Browse Source
This commit is contained in:
Melon 2025-03-29 23:48:22 +00:00
parent f3c05c46a8
commit 3719fc57cc
Signed by: melon
GPG Key ID: 6C9D970C50D26A25
2 changed files with 6 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
serve/serve.go
View File

@ -68,6 +68,11 @@ func cacheBuster(rw http.ResponseWriter, req *http.Request) {
} }
func (h *Handler) ServeHTTP(rw http.ResponseWriter, req *http.Request) { func (h *Handler) ServeHTTP(rw http.ResponseWriter, req *http.Request) {
if req.Method != http.MethodGet {
http.Error(rw, http.StatusText(http.StatusMethodNotAllowed), http.StatusMethodNotAllowed)
return
}
host, _, err := net.SplitHostPort(req.Host) host, _, err := net.SplitHostPort(req.Host)
if err != nil { if err != nil {
host = req.Host host = req.Host

2
serve/serve_test.go
View File

@ -53,7 +53,7 @@ func serveTest(t *testing.T, address string, branch string, name string) {
//goland:noinspection HttpUrlsUsage //goland:noinspection HttpUrlsUsage
const httpPrefix = "http://" const httpPrefix = "http://"
req := httptest.NewRequest(http.MethodPost, httpPrefix+address, nil) req := httptest.NewRequest(http.MethodGet, httpPrefix+address, nil)
if branch != "" { if branch != "" {
req.AddCookie(&http.Cookie{ req.AddCookie(&http.Cookie{
Name: "__bluebell-site-beta", Name: "__bluebell-site-beta",