From dddf5a9a092e01530cc37ddc313b569d121f1a9c Mon Sep 17 00:00:00 2001 From: Miguel Jacq Date: Thu, 20 Sep 2018 11:33:37 +1000 Subject: [PATCH] Throw a 403 on the index pages if the timer has run out but an upload is in progress --- onionshare/web.py | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/onionshare/web.py b/onionshare/web.py index 1c285ea7..f52d9dd6 100644 --- a/onionshare/web.py +++ b/onionshare/web.py @@ -340,10 +340,14 @@ class Web(object): @self.app.route("/") def index(slug_candidate): self.check_slug_candidate(slug_candidate) + if not self.can_upload: + return self.error403() return index_logic() @self.app.route("/") def index_public(): + if not self.can_upload: + return self.error403() if not self.common.settings.get('public_mode'): return self.error404() return index_logic()