// // Copyright (c) 2013-2023 The SRS Authors // // SPDX-License-Identifier: MIT or MulanPSL-2.0 // #include #include #include #include SrsRefer::SrsRefer() { } SrsRefer::~SrsRefer() { } srs_error_t SrsRefer::check(std::string page_url, SrsConfDirective* refer) { srs_error_t err = srs_success; if (!refer) { return err; } for (int i = 0; i < (int)refer->args.size(); i++) { if ((err = check_single_refer(page_url, refer->args.at(i))) == srs_success) { return srs_success; } srs_error_reset(err); } return srs_error_new(ERROR_RTMP_ACCESS_DENIED, "access denied"); } srs_error_t SrsRefer::check_single_refer(std::string page_url, std::string refer) { srs_error_t err = srs_success; size_t pos = std::string::npos; std::string domain_name = page_url; if ((pos = domain_name.find("://")) != std::string::npos) { domain_name = domain_name.substr(pos + 3); } if ((pos = domain_name.find("/")) != std::string::npos) { domain_name = domain_name.substr(0, pos); } if ((pos = domain_name.find(":")) != std::string::npos) { domain_name = domain_name.substr(0, pos); } pos = domain_name.find(refer); if (pos == std::string::npos) { return srs_error_new(ERROR_RTMP_ACCESS_DENIED, "access denied"); } // match primary domain. if (pos != domain_name.length() - refer.length()) { return srs_error_new(ERROR_RTMP_ACCESS_DENIED, "access denied"); } return err; }