Burn notices, burn

2018-09-11 04:10:11 +00:00
parent aa2ab3d0e7
commit 8b96a53fba
6 changed files with 36 additions and 30 deletions
--- a/mod/bookmarklet.php
+++ b/mod/bookmarklet.php
@@ -30,6 +30,10 @@ function bookmarklet_content(App $a)
 	$page = normalise_link(System::baseUrl() . "/bookmarklet");

 	if (!strstr($referer, $page)) {
+		if (empty($_REQUEST["url"])) {
+			System::httpExit(400, ["title" => L10n::t('Bad Request')]);
+		}
+
 		$content = add_page_info($_REQUEST["url"]);

 		$x = [