mc-in-work/PrismLauncher
1
0
Fork 0
mirror of https://github.com/PrismLauncher/PrismLauncher.git synced 2026-06-29 01:54:20 +03:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

Allow http://localhost for meta (#4477)

Browse source
This commit is contained in:
TheKodeToad 2025-12-13 22:53:05 +00:00 • committed by GitHub
commit caa69ee204
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 6 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

8
launcher/ui/pages/global/APIPage.cpp
View file

@ -172,13 +172,17 @@ void APIPage::applySettings()
path.append('/');
resourceURL.setPath(path);
}
auto isLocalhost = [](const QUrl& url) { return url.host() == "localhost" || url.host() == "127.0.0.1" || url.host() == "::1"; };
auto isUnsafe = [isLocalhost](const QUrl& url) { return !url.isEmpty() && url.scheme() == "http" && !isLocalhost(url); };
// Don't allow HTTP, since meta is basically RCE with all the jar files.
if (!metaURL.isEmpty() && metaURL.scheme() == "http") {
if (isUnsafe(metaURL)) {
metaURL.setScheme("https");
}
// Also don't allow HTTP
if (!resourceURL.isEmpty() && resourceURL.scheme() == "http") {
if (isUnsafe(resourceURL)) {
resourceURL.setScheme("https");
}