Limit access to specific user-agent

biglinux · Nov 16, 2023 · 98cc5c1 · 98cc5c1
1 parent 8739313
commit 98cc5c1
Show file tree

Hide file tree

Showing 4 changed files with 9 additions and 258 deletions.
diff --git a/bigbashview/usr/lib/bbv/server/views.py b/bigbashview/usr/lib/bbv/server/views.py
@@ -40,6 +40,11 @@ def POST(self, name=''):
         return self.parse_and_call(web.data(), name)
 
     def parse_and_call(self, qs, name):
+        user_agent = web.ctx.env.get('HTTP_USER_AGENT')
+        if user_agent != "BigBashView-Agent":
+            raise web.Forbidden()
+        if web.ctx.ip != '127.0.0.1':
+            raise web.Forbidden()
         qs = parse_qs(qs)
         options, content = self._get_set_default_options(name)
         html = self.called(options, content, qs)

diff --git a/bigbashview/usr/lib/bbv/ui/gtk.py b/bigbashview/usr/lib/bbv/ui/gtk.py
@@ -27,6 +27,8 @@ class Window(Gtk.Window):
     def __init__(self):
         Gtk.Window.__init__(self)
         self.webview = WebKit2.WebView()
+        settings = self.webview.get_settings()
+        settings.set_user_agent("BigBashView-Agent")
         self.webview.show()
         self.add(self.webview)
         self.set_icon_from_file(ICON)

diff --git a/bigbashview/usr/lib/bbv/ui/qt.py b/bigbashview/usr/lib/bbv/ui/qt.py
@@ -44,6 +44,8 @@
 class Window(QWidget):
     def __init__(self):
         self.app = QApplication(sys.argv)
+        self.web = QWebEngineView()
+        self.web.page().profile().setHttpUserAgent("BigBashView-Agent")
         super().__init__()
         self.web = QWebEngineView()
         self.inspector = QWebEngineView()

diff --git a/bigbashview/usr/lib/bbv/ui/qt5.py b/bigbashview/usr/lib/bbv/ui/qt5.py