go: only allow origins from same network (localhost) #10

Manually merged
hamza merged 1 commits from hamza/TerraOceanPlugin:master into master 2019-10-13 05:06:22 +07:00
2 changed files with 7 additions and 2 deletions

@ -1,13 +1,13 @@
package main
import (
"TerraOceanBot/server"
"io/ioutil"
"os"
"os/signal"
"syscall"
"TerraOceanBot/discord"
"TerraOceanBot/server"
)
func main() {

@ -5,6 +5,7 @@ import (
"log"
"net/http"
"strconv"
"strings"
"github.com/gorilla/websocket"
)
@ -12,12 +13,16 @@ import (
var upgrader = websocket.Upgrader{
ReadBufferSize: 1024,
WriteBufferSize: 1024,
CheckOrigin: func(r *http.Request) bool {
return strings.Contains(r.Host, "localhost")
},
}
func newConnection(w http.ResponseWriter, r *http.Request) {
ws, err := upgrader.Upgrade(w, r, nil)
if err != nil {
fmt.Fprint(w, "You must use the websocket protocol to connect to this endpoint.", err)
fmt.Fprintf(w, "An error has occured: %s.\n", err)
return
}
defer ws.Close()