gitolite/pngs
gitolite
/
pngs
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

nedap server: token validation for gif uploads too

This commit is contained in:
Astro 2011-12-13 19:28:42 +01:00
parent c6ee661bf9
commit 0604db4344
1 changed files with 8 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
nedap/server.js
View File

@ -95,6 +95,9 @@ function nedap(app) {
form.c('p').t(question);
form.c('input', { type: 'file', name: 'gif' });
form.c('input', { type: 'submit', value: "Submit" });
form.c('input', { type: 'hidden',
name: 'token',
value: Token.generate() });
form.c('p').t("Max file size: 2 MB");
res.write(html(form.toString()));
res.end();
@ -138,6 +141,11 @@ function nedap(app) {
app.post('/i', function(req, res) {
if (req.files.gif) {
if (!Token.validate(req.body.token)) {
res.writeHead(200, { 'Content-type': MIME_HTML });
res.end("Cheater!");
return;
}
/* pass to frontend */
var gif = req.files.gif;
var path = gif.path + "." + mime.extension(gif.type);