aiolabs/lnbits
1
0
Fork 0
Code Issues 1 Pull requests Projects Releases Packages Wiki Activity Actions

Enforce https on Success URL for lnurlp

Browse source
This commit is contained in:
Pac 2021-05-28 03:11:42 -03:00 • committed by fiatjaf
parent f6a8e96087
commit 036e45d77c
1 changed files with 3 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

3
lnbits/extensions/lnurlp/views_api.py
View file

@ -88,6 +88,9 @@ async def api_link_create_or_update(link_id=None):
):
return jsonify({"message": "Must use full satoshis."}), HTTPStatus.BAD_REQUEST
if g.data["success_url"][:8] != "https://":
return jsonify({"message": "Success URL must be secure https://..."}), HTTPStatus.BAD_REQUEST
if link_id:
link = await get_pay_link(link_id)