mirror of
https://github.com/nexy7574/LCC-bot.git
synced 2024-09-19 10:03:40 +01:00
Properly detect invalid IP addresses to avoid sending bad requests
This commit is contained in:
parent
e8f08398a2
commit
eccdaa1274
1 changed files with 4 additions and 1 deletions
|
@ -1,3 +1,5 @@
|
|||
import ipaddress
|
||||
|
||||
import discord
|
||||
import os
|
||||
import httpx
|
||||
|
@ -133,7 +135,8 @@ async def authenticate(req: Request, code: str = None, state: str = None):
|
|||
)
|
||||
|
||||
# Now send a request to https://ip-api.com/json/{ip}?fields=status,city,zip,lat,lon,isp,query
|
||||
if req.client.host not in ("127.0.0.1", "localhost", "::1"):
|
||||
_host = ipaddress.ip_address(req.client.host)
|
||||
if not any((_host.is_loopback, _host.is_private, _host.is_reserved, _host.is_unspecified)):
|
||||
response = app.state.http.get(
|
||||
f"http://ip-api.com/json/{req.client.host}?fields=status,city,zip,lat,lon,isp,query,proxy,hosting"
|
||||
)
|
||||
|
|
Loading…
Reference in a new issue