direct-img/direct-img.link
1
0
Fork 0
mirror of https://github.com/direct-img/direct-img.link.git synced 2026-03-17 03:01:01 +00:00
Code Issues Packages Projects Releases Wiki Activity

Fix: Block literal dots and slashes to stop bots

Browse Source
This commit is contained in:
multipleof4
2026-02-17 19:51:45 -08:00
parent 4e50f7c3f4
commit a045461df4
1 changed files with 6 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
README.md
View File

@@ -44,22 +44,24 @@ All queries are normalized before caching and searching:
| Multiple spaces collapsed | `orange++cat` | `orange cat` | | Multiple spaces collapsed | `orange++cat` | `orange cat` |
| Trailing slashes stripped | `orange+cat/` | `orange cat` | | Trailing slashes stripped | `orange+cat/` | `orange cat` |
| Control characters removed | `orange\x00cat` | `orangecat` | | Control characters removed | `orange\x00cat` | `orangecat` |
| **Slashes rejected** | `wp-admin/setup.php` | `bad.webp` served | | **Slashes & Dots rejected** | `info.php`, `wp-admin/` | `bad.webp` served |
| **Max length: 200 characters** | — | 400 error if exceeded | | **Max length: 200 characters** | — | 400 error if exceeded |
### Characters that work fine ### Characters that work fine
- **Letters, numbers, spaces** — standard queries - **Letters, numbers, spaces** — standard queries
- **Hyphens** (`spider-man`), **dots** (`node.js`), **apostrophes** (`90's`) — passed through - **Hyphens** (`spider-man`), **apostrophes** (`90's`) — passed through
- **Unicode** (`café`, `日本`) — supported via URL encoding - **Unicode** (`café`, `日本`) — supported via URL encoding
### Slashes must be encoded ### Slashes and Dots must be encoded
Literal slashes (`/`) in the URL path are **rejected** to prevent bot abuse (e.g. `wp-admin/setup-config.php` probes). If your query genuinely contains a slash, encode it as `%2F`: Literal slashes (`/`) and dots (`.`) in the URL path are **rejected** to prevent bot abuse (e.g. `info.php` or `wp-admin/` probes). If your query genuinely contains these characters, you must encode them:
| Query | URL | | Query | URL |
|---|---| |---|---|
| AC/DC | `/AC%2FDC` ✅ | | AC/DC | `/AC%2FDC` ✅ |
| node.js | `/node%2Ejs` ✅ |
| info.php | `/info.php` ❌ (rejected) |
| AC/DC | `/AC/DC` ❌ (rejected) | | AC/DC | `/AC/DC` ❌ (rejected) |
### Things to know ### Things to know