diff options
Diffstat (limited to 'server/cmd')
| -rw-r--r-- | server/cmd/listend/main.go | 5 |
1 files changed, 4 insertions, 1 deletions
diff --git a/server/cmd/listend/main.go b/server/cmd/listend/main.go index 3ca2727..0e787e4 100644 --- a/server/cmd/listend/main.go +++ b/server/cmd/listend/main.go @@ -31,6 +31,7 @@ import ( "github.com/terst/listen/server/internal/decode" "github.com/terst/listen/server/internal/feed" "github.com/terst/listen/server/internal/mirror" + "github.com/terst/listen/server/internal/safefetch" "github.com/terst/listen/server/internal/signature" "github.com/terst/listen/server/internal/skips" "github.com/terst/listen/server/internal/store" @@ -580,7 +581,9 @@ func fetchFeed(ctx context.Context, url string) ([]byte, error) { return nil, err } req.Header.Set("User-Agent", "listen-server/1.0 (+https://terst.org)") - resp, err := http.DefaultClient.Do(req) + // A feed URL is whatever the phone sent, so the same rule applies as to everything else + // this server fetches: it may only reach a public address. + resp, err := safefetch.Client(0).Do(req) if err != nil { return nil, err } |