diff options
| author | Rose Hogenson <rosehogenson@posteo.net> | 2025-11-10 22:31:03 -0800 |
|---|---|---|
| committer | Rose Hogenson <rosehogenson@posteo.net> | 2025-11-10 22:31:03 -0800 |
| commit | a14f5d08c264637639d518267a1397e137823fcf (patch) | |
| tree | fdd9b146a34f21b9bb9b38c75fb5f965eeb67be8 /templates | |
| parent | 7ebfd2d33571b662a4997004cdba53f220631e8b (diff) | |
| download | roseh.moe-a14f5d08c264637639d518267a1397e137823fcf.tar.zst | |
Validate the QR code
Since the qr code is generated by a 3rd party dependency that I probably
won't update, let's make sure to only pass it trusted input.
Diffstat (limited to 'templates')
| -rw-r--r-- | templates/wormhole.html.template | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/templates/wormhole.html.template b/templates/wormhole.html.template index ad23b57..eb423ca 100644 --- a/templates/wormhole.html.template +++ b/templates/wormhole.html.template @@ -12,7 +12,7 @@ </li> <li> <p>Visit this URL <a href="/wormhole/{{.Hole}}">{{.Self}}/wormhole/{{.Hole}}</a> or scan QR code:</p> - <img src="/wormhole/{{.Hole}}/qr.png" alt="QR code for {{.Self}}/wormhole/{{.Hole}}"> + <img src="/wormhole/{{.Hole}}/qr.png?s={{.Sig}}" alt="QR code for {{.Self}}/wormhole/{{.Hole}}"> </li> <li> <label for="submit">Click here:</label> |