X-Git-Url: https://git.pterodactylus.net/?a=blobdiff_plain;f=src%2Fhttp%2Fpages%2Fshowimagepage.cpp;h=e63349dfb919f76cb68ddc831e3f379e66c61f30;hb=9ae3b1434e51788e6feb72e1415ec800d05c535a;hp=cff1a2c86b1bb16b906748a737eea25b1b564948;hpb=ed0732b2550c23c05fc9faf925620e87ee6dee12;p=fms.git

diff --git a/src/http/pages/showimagepage.cpp b/src/http/pages/showimagepage.cpp
index cff1a2c..e63349d 100644
--- a/src/http/pages/showimagepage.cpp
+++ b/src/http/pages/showimagepage.cpp
@@ -7,6 +7,13 @@
 #endif
 
 std::map<std::string,std::vector<char> > ShowImagePage::m_imagecache;
+std::set<std::string> ShowImagePage::m_imagewhitelist;
+
+ShowImagePage::ShowImagePage(SQLite3DB::DB *db):IPageHandler(db)
+{
+	m_imagewhitelist.insert("images/new_posts.png");
+	m_imagewhitelist.insert("images/no_new_posts.png");
+}
 
 void ShowImagePage::handleRequest(Poco::Net::HTTPServerRequest &request, Poco::Net::HTTPServerResponse &response)
 {
@@ -21,7 +28,7 @@ void ShowImagePage::handleRequest(Poco::Net::HTTPServerRequest &request, Poco::N
 	}
 
 	std::string content="";
-	if(queryvars.find("image")!=queryvars.end())
+	if(queryvars.find("image")!=queryvars.end() && m_imagewhitelist.find((*queryvars.find("image")).second)!=m_imagewhitelist.end())
 	{
 		if(m_imagecache.find((*queryvars.find("image")).second)!=m_imagecache.end())
 		{