verify X-Persona header if present

2019-06-03 08:12:33 +01:00
parent 4c21f2d5ae
commit b6f7f51476
1 changed files with 5 additions and 0 deletions
--- a/core/src/main/groovy/com/muwire/core/upload/UploadManager.groovy
+++ b/core/src/main/groovy/com/muwire/core/upload/UploadManager.groovy
@@ -62,6 +62,11 @@ public class UploadManager {
            }

            Request request = Request.parse(new InfoHash(infoHashRoot), e.getInputStream())
+            if (request.downloader != null && request.downloader.destination != e.destination) {
+                log.info("Downloader persona doesn't match their destination")
+                e.close()
+                return
+            }
            Uploader uploader = new Uploader(sharedFiles.iterator().next().file, request, e)
            eventBus.publish(new UploadEvent(uploader : uploader))
            try {