zefie/minisrv
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

new experimental feature: shenanigans

Browse Source 
- will allow server operates to intentionally enable bugs/exploits for fun shenanigans
This commit is contained in:
zefie
2022-12-01 09:09:03 -05:00
parent b437d99f91
commit 55cbf592ee
6 changed files with 85 additions and 16 deletions
Download Patch File Download Diff File Expand all files Collapse all files

24
zefie_wtvp_minisrv/includes/ServiceVault/wtv-tricks/access.js
View File

@@ -1,14 +1,16 @@
var minisrv_service_file = true;
// Allow URL access outside our trusted minisrv
if (wtvshared.shenanigans.checkShenanigan(wtvshared.shenanigans.shenanigans.ENABLE_TRICKS_URLACCESS)) {
// Allow URL access outside our trusted minisrv
if (request_headers.query.url) var url = request_headers.query.url;
else var url = "client:showalert?message=Please%20provide%20a%20%3Furl%3D%20with%20the%20url%20you%20would%20like%20to%20access.&buttonlabel1=Okay&buttonacction1=client:donothing"
if (request_headers.query.url) var url = request_headers.query.url;
else var url = "client:showalert?message=Please%20provide%20a%20%3Furl%3D%20with%20the%20url%20you%20would%20like%20to%20access.&buttonlabel1=Okay&buttonacction1=client:donothing"
headers = `300 OK
wtv-visit: ${url}
Location: ${url}
Content-type: text/html`
data = '';
headers = `300 OK
wtv-visit: ${url}
Location: ${url}
Content-type: text/html`
} else {
var err = wtvshared.doErrorPage(403, "Access Denied");
headers = err[0];
data = err[1];
}