From dc193f75554e7ef5ef1f8fb890e3e90434e78e6b Mon Sep 17 00:00:00 2001 From: El RIDO Date: Sun, 23 Jun 2019 09:54:48 +0200 Subject: [PATCH] Revert "removing exceptions - in these cases server admins can opt to disable the warning message in the configuration" This reverts commit d0365faf769ddadd0f1322d54ad3da6323bd3ebf. --- js/privatebin.js | 19 +++++++++++++++++++ tpl/bootstrap.php | 2 +- tpl/page.php | 2 +- 3 files changed, 21 insertions(+), 2 deletions(-) diff --git a/js/privatebin.js b/js/privatebin.js index 2d33062..c2085f9 100644 --- a/js/privatebin.js +++ b/js/privatebin.js @@ -4538,10 +4538,29 @@ jQuery.PrivateBin = (function($, RawDeflate) { } const url = new URL(window.location); + // HTTP is obviously insecure if (url.protocol !== 'http:') { return false; } + + // filter out actually secure connections over HTTP + if ( + url.hostname.endsWith('.onion') || + url.hostname.endsWith('.i2p') + ) { + return false; + } + + // whitelist localhost for development + if ( + url.hostname === 'localhost' || + url.hostname === '127.0.0.1' + ) { + return false; + } + + // totally INSECURE http protocol! return true; } diff --git a/tpl/bootstrap.php b/tpl/bootstrap.php index b60a9ce..45b231e 100644 --- a/tpl/bootstrap.php +++ b/tpl/bootstrap.php @@ -72,7 +72,7 @@ if ($MARKDOWN): endif; ?> - + diff --git a/tpl/page.php b/tpl/page.php index 32e662b..aaddba1 100644 --- a/tpl/page.php +++ b/tpl/page.php @@ -50,7 +50,7 @@ if ($MARKDOWN): endif; ?> - +