Liferea

I follow some blogs that block image hotlinking in case the request
doesn't have an http referer or having one, is not in the list of
accepted ones.
In liferea, because entry/item content html is not the actual web page
of the site, when requesting images, the referer is not sent, and
consider hotlinking.
There would be a easy fix, if possible, that is sending the referer of
the entry/item link.

Is it possible?
can it have unwanted side effects?

thanks

Re: [Liferea-devel] Prevent hotlinking blocking From: Lars Lindner <lars.lindner@gm...> - 2012-03-23 12:57 On Fri, Mar 23, 2012 at 1:31 PM, gucopas pas <gucopas@...> wrote: > I follow some blogs that block image hotlinking in case the request > doesn't have an http referer or having one, is not in the list of > accepted ones. > In liferea, because entry/item content html is not the actual web page > of the site, when requesting images, the referer is not sent, and > consider hotlinking. > There would be a easy fix, if possible, that is sending the referer of > the entry/item link. > > Is it possible? > can it have unwanted side effects? For rendering item content we use Webkit and rely on it's standard HTML handling. There is no request building. Therefore it is not possible (without complicating things) to modify the request. Does this affect many blogs you read? Can you provide an example URL? Regards, Lars

Re: [Liferea-devel] Prevent hotlinking blocking From: gucopas pas <gucopas@gm...> - 2012-03-23 16:35 > Does this affect many blogs you read? > Can you provide an example URL? > > Regards, > Lars Yes unfortunately, I even try to email them to correct this behavior, because they cold very well allow requests without referer. Example: http://maistvi.com/?feed=rss2 , in images hosted at this blog, like http://maistvi.com/wp-content/uploads/2012/03/novosmorangox.bmp will redirect to http://casa-dos-segredos.com/hotlink.jpg

Re: [Liferea-devel] Prevent hotlinking blocking From: Aristotle Pagaltzis <pagaltzis@gm...> - 2012-03-23 16:37 * Lars Lindner <lars.lindner@...> [2012-03-23 14:00]: > For rendering item content we use Webkit and rely on it's standard > HTML handling. There is no request building. Therefore it is not > possible (without complicating things) to modify the request. I believe it would if you were to set a base URL when rendering an item. I saw the comments in the code… so what is it that you need to load from a file:// URL, anyway? The stylesheet I guess? Regards, -- Aristotle Pagaltzis // <http://plasmasturm.org/>

Re: [Liferea-devel] Prevent hotlinking blocking From: Lars Lindner <lars.lindner@gm...> - 2012-03-23 17:11 On Fri, Mar 23, 2012 at 5:37 PM, Aristotle Pagaltzis <pagaltzis@...> wrote: > * Lars Lindner <lars.lindner@...> [2012-03-23 14:00]: >> For rendering item content we use Webkit and rely on it's standard >> HTML handling. There is no request building. Therefore it is not >> possible (without complicating things) to modify the request. > > I believe it would if you were to set a base URL when rendering an item. So you mean setting the base URI to something like the cache directory where the CSS resides and include the CSS by relative path? > I saw the comments in the code… so what is it that you need to load from > a file:// URL, anyway? The stylesheet I guess? Correct. Cheers, Lars

Re: [Liferea-devel] Prevent hotlinking blocking From: Aristotle Pagaltzis <pagaltzis@gm...> - 2012-03-25 03:11 * Lars Lindner <lars.lindner@...> [2012-03-23 18:15]: > On Fri, Mar 23, 2012 at 5:37 PM, Aristotle Pagaltzis <pagaltzis@...> wrote: > >* Lars Lindner <lars.lindner@...> [2012-03-23 14:00]: > >>For rendering item content we use Webkit and rely on it's standard > >>HTML handling. There is no request building. Therefore it is not > >>possible (without complicating things) to modify the request. > > > >I believe it would if you were to set a base URL when rendering an item. > > So you mean setting the base URI to something like the cache directory > where the CSS resides and include the CSS by relative path? No, I mean by setting the base URI in loadHTMLString to the base URI of the actual item, instead of patching it via a <div href>, you *should* get WebKit to send that base URI as the referrer for images. (It would also make footnote anchor links work which currently open the item in the browser instead of just jumping to the footnote.) > >I saw the comments in the code… so what is it that you need to load from > >a file:// URL, anyway? The stylesheet I guess? > > Correct. Hmm, I wonder how that could be injected in some other way… that must be doable. Regards, -- Aristotle Pagaltzis // <http://plasmasturm.org/>

Re: [Liferea-devel] Prevent hotlinking blocking From: gucopas pas <gucopas@gm...> - 2012-03-25 06:24 I googled this problem and found http://lists.macosforge.org/pipermail/webkit-help/2010-June/001291.html It seems the best way is to use a custom URL scheme I didn't research this in the liferea code, but if webkit allows file scheme because of the css to render the item content html, could some site owner of one of my feeds get some local file from my computer using that information, or the file scheme is sanitized.

2 messages have been excluded from this view by a project administrator.