tor-browser

The Tor Browser
git clone https://git.dasho.dev/tor-browser.git
Log | Files | Refs | README | LICENSE

image-referrer-policy.py (1976B)


      1 import os.path
      2 
      3 from wptserve.utils import isomorphic_decode
      4 
      5 def main(request, response):
      6    origin = request.GET[b'origin']
      7    url = request.GET[b'url']
      8    expected_referrer = request.GET[b'expected_referrer']
      9    actual_referrer = request.headers.get(b'referer', b'')
     10 
     11    if expected_referrer == b'none':
     12        if actual_referrer == b'':
     13            body = open(os.path.join(os.path.dirname(isomorphic_decode(__file__)), u"1x1-green.png"), u"rb").read()
     14        else:
     15            body = open(os.path.join(os.path.dirname(isomorphic_decode(__file__)), u"1x1-red.png"), u"rb").read()
     16    elif expected_referrer == b'origin':
     17        if actual_referrer == origin:
     18            body = open(os.path.join(os.path.dirname(isomorphic_decode(__file__)), u"1x1-green.png"), u"rb").read()
     19        else:
     20            body = open(os.path.join(os.path.dirname(isomorphic_decode(__file__)), u"1x1-red.png"), u"rb").read()
     21    elif expected_referrer == b'url':
     22        if actual_referrer == url:
     23            body = open(os.path.join(os.path.dirname(isomorphic_decode(__file__)), u"1x1-green.png"), u"rb").read()
     24        else:
     25            body = open(os.path.join(os.path.dirname(isomorphic_decode(__file__)), u"1x1-red.png"), u"rb").read()
     26    else:
     27        # Return neither red nor green if there is an unexpected "expected_referrer".
     28        body = open(os.path.join(os.path.dirname(isomorphic_decode(__file__)), u"1x1-navy.png"), u"rb").read()
     29 
     30    response.add_required_headers = False
     31    response.writer.write_status(200)
     32 
     33    if b'corp' in request.GET:
     34        response.writer.write_header(b"cross-origin-resource-policy", request.GET[b'corp'])
     35    if b'acao' in request.GET:
     36        response.writer.write_header(b"access-control-allow-origin", request.GET[b'acao'])
     37    response.writer.write_header(b"content-length", len(body))
     38    response.writer.write_header(b"cache-control", b"no-cache; must-revalidate")
     39    response.writer.end_headers()
     40 
     41    response.writer.write(body)