From b6f7f51476866f75e3adcc47bcf2ae90788080a8 Mon Sep 17 00:00:00 2001 From: Zlatin Balevsky Date: Mon, 3 Jun 2019 08:12:33 +0100 Subject: [PATCH] verify X-Persona header if present --- .../main/groovy/com/muwire/core/upload/UploadManager.groovy | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/core/src/main/groovy/com/muwire/core/upload/UploadManager.groovy b/core/src/main/groovy/com/muwire/core/upload/UploadManager.groovy index 84f69102..9cda302b 100644 --- a/core/src/main/groovy/com/muwire/core/upload/UploadManager.groovy +++ b/core/src/main/groovy/com/muwire/core/upload/UploadManager.groovy @@ -62,6 +62,11 @@ public class UploadManager { } Request request = Request.parse(new InfoHash(infoHashRoot), e.getInputStream()) + if (request.downloader != null && request.downloader.destination != e.destination) { + log.info("Downloader persona doesn't match their destination") + e.close() + return + } Uploader uploader = new Uploader(sharedFiles.iterator().next().file, request, e) eventBus.publish(new UploadEvent(uploader : uploader)) try {