sending challenge on paste creation, adding logic to store and check it on view requests

2019-06-28 21:33:52 +02:00
parent d0c8975b89
commit 79db7ddafc
13 changed files with 247 additions and 14 deletions
--- a/lib/FormatV2.php
+++ b/lib/FormatV2.php
@@ -67,6 +67,13 @@ class FormatV2
        if (!($ct = base64_decode($message['ct'], true))) {
            return false;
        }
+        // - (optional) challenge
+        if (
+            !$isComment && array_key_exists('challenge', $message['meta']) &&
+            !base64_decode($message['meta']['challenge'], true)
+        ) {
+            return false;
+        }

        // Make sure some fields have a reasonable size:
        // - initialization vector