mirror of https://github.com/zulip/zulip.git
c726d2ec01
Providing a signed Camo URL for arbitrary URLs opened the server up to being an open redirector. Return 403 if the URL is not a user upload, and the backend image if it is. Since we do not have ImageAttachment rows for uploads at a time we wrote `/thumbnail?` URLs, return the full-size content. |
||
|---|---|---|
| .. | ||
| __init__.py | ||
| cache.py | ||
| camo.py | ||
| dev_login.py | ||
| email_log.py | ||
| integrations.py | ||
| registration.py | ||