D4
/
BGP-Ranking
mirror of https://github.com/D4-project/BGP-Ranking
2
0
Fork 0
Code Issues Releases Wiki Activity

fix: sanitize ipasn_history proxy

pull/12/head
Raphaël Vinot 2019-01-04 11:56:29 +01:00
parent c71b2bdf7c
commit 1c2efc88da
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
website/web/__init__.py
View File

@ -1,6 +1,7 @@
#!/usr/bin/env python #!/usr/bin/env python
# -*- coding: utf-8 -*- # -*- coding: utf-8 -*-
from urllib.parse import urljoin
try: try:
import simplejson as json import simplejson as json
except ImportError: except ImportError:
@ -78,8 +79,7 @@ def ipasn_history_proxy(path):
config, general_config_file = load_general_config() config, general_config_file = load_general_config()
if 'ipasnhistory_url' not in config: if 'ipasnhistory_url' not in config:
raise MissingConfigEntry(f'"ipasnhistory_url" is missing in {general_config_file}.') raise MissingConfigEntry(f'"ipasnhistory_url" is missing in {general_config_file}.')
full_path_to_proxy = request.full_path.replace('/ipasn_history/', '') proxied_url = urljoin(config['ipasnhistory_url'], request.full_path.replace('/ipasn_history', ''))
proxied_url = f'{config["ipasnhistory_url"]}{full_path_to_proxy}'
if request.method in ['GET', 'HEAD']: if request.method in ['GET', 'HEAD']:
to_return = requests.get(proxied_url).json() to_return = requests.get(proxied_url).json()
elif request.method == 'POST': elif request.method == 'POST':