raw referer

2025-02-28 21:47:14 +08:00 · 2025-02-28 21:47:14 +08:00 · 144860fd2f
parent a1d8e4fa40
commit 144860fd2f
1 changed files with 3 additions and 1 deletions
--- a/app/controllers/repositories_controller.rb
+++ b/app/controllers/repositories_controller.rb
@ -298,7 +298,9 @@ class RepositoriesController < ApplicationController
    redirect_to file_path
  end
  
-  def raw 
+  def raw
+    Rails.logger.info("request.host===#{request.host},request.referer===#{request.referer}")
+    tip_exception(403, "你没有权限访问") if request.host.present? && !request.referer.to_s.include?(request.host.to_s.gsub("www.",""))
    domain  = GiteaService.gitea_config[:domain]
    api_url = GiteaService.gitea_config[:base_url]