From 363bf9b08c1def89b3fe47362f1c50ca85203a46 Mon Sep 17 00:00:00 2001 From: Pierre Rudloff Date: Sun, 27 Feb 2022 23:36:51 +0100 Subject: [PATCH] fixup! Prevent SSRF requests By validating the provided URL before passing it to youtube-dl --- classes/Controller/JsonController.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/classes/Controller/JsonController.php b/classes/Controller/JsonController.php index fddef42..941918e 100644 --- a/classes/Controller/JsonController.php +++ b/classes/Controller/JsonController.php @@ -7,7 +7,6 @@ namespace Alltube\Controller; use Alltube\Library\Exception\AlltubeLibraryException; -use Exception; use Graby\HttpClient\Plugin\ServerSideRequestForgeryProtection\Exception\InvalidURLException; use Slim\Http\Request; use Slim\Http\Response; @@ -25,6 +24,7 @@ class JsonController extends BaseController * @param Response $response PSR-7 response * * @return Response HTTP response + * @throws AlltubeLibraryException */ public function json(Request $request, Response $response): Response {