mirror of
https://github.com/truewhile/MeBox.git
synced 2026-10-03 20:26:36 +08:00
fix: harden playback and security edge cases
This commit is contained in:
Vendored
+1
-1
@@ -106,7 +106,7 @@ function artworkIdentity(url) {
|
||||
return `${url.origin}${url.pathname}?url=${url.searchParams.get('url') || ''}`
|
||||
}
|
||||
if (url.pathname.startsWith('/api/cloud/play/')) {
|
||||
return `${url.origin}${url.pathname}`
|
||||
return `${url.origin}${url.pathname}?ref=${url.searchParams.get('ref') || ''}`
|
||||
}
|
||||
return ''
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user