From: Kyle Czar <czar@kalli.st>
Date: Wed, 2 Apr 2025 19:33:03 +0000 (-0300)
Subject: don't fetch private urls
X-Git-Url: https://git.patchysicp.xyz/?a=commitdiff_plain;h=617d5c6a981744113f3fbde1980b4151dbf76cc6;p=angel.git

don't fetch private urls
---

diff --git a/main.py b/main.py
index 5810268..7a6dfe9 100644
--- a/main.py
+++ b/main.py
@@ -13,6 +13,7 @@ from slixmpp import ClientXMPP
 from urllib.parse import urlparse, parse_qs, urlunparse
 from pantomime import normalize_mimetype
 import cgi
+import ipaddress
 
 sed_parse = re.compile("(?<!\\\\)[/#]")
 sed_cmd = re.compile("^s[/#].*[/#].*[/#]")
@@ -33,8 +34,6 @@ youtube_link = "youtu.be"
 
 ydl = youtube_dl.YoutubeDL()
 
-block_list = ("localhost", "127.0.0.1", "0.0.0.0")
-
 req_list = ("http://", "https://")
 
 html_files = ("text/html", "application/xhtml+xml")
@@ -120,7 +119,7 @@ class AngelBot(ClientXMPP):
         netloc = uri.netloc
         if self.invidious_instances and netloc in (self.youtube_links + [youtube_link]):
             self.send_youtube_info(uri, sender, mtype)
-        elif netloc.split(":")[0] in block_list:
+        elif ipaddress.ip_address(netloc.split(":")[0]).is_private:
             return
         else:
             await self.process_link(uri, sender, mtype)