Haschek-Solutions/http2pic
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix: reject zero-dimension viewport values

Browse Source
This commit is contained in:
Chris
2026-04-21 12:04:05 +02:00
parent 8590465c6a
commit e7924f462e
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
web/index.php
View File

@@ -41,7 +41,7 @@ switch ($url[0]) {
exit; exit;
} }
$vpParts = array_map('intval', explode('x', $viewport)); $vpParts = array_map('intval', explode('x', $viewport));
if ($vpParts[0] > 3840 || $vpParts[1] > 2160) { if ($vpParts[0] < 1 || $vpParts[1] < 1 || $vpParts[0] > 3840 || $vpParts[1] > 2160) {
header('HTTP/1.0 400 Bad Request'); header('HTTP/1.0 400 Bad Request');
echo 'Viewport exceeds maximum (3840x2160)'; echo 'Viewport exceeds maximum (3840x2160)';
exit; exit;