fanhuadesenlinnn/tdesktop
1
0
Fork 0
mirror of https://hubproxy.babadafafafafa.cn/https://github.com/telegramdesktop/tdesktop synced 2026-09-20 08:03:45 +08:00
Code Issues Packages Projects Releases Wiki Activity

Anchor SmartGlocal tokenization URLs to hosts

Browse Source
This commit is contained in:
John Preston
2026-08-11 19:16:44 +04:00
parent 1823c49812
commit 83daeda468
1 changed files with 22 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

26
Telegram/SourceFiles/payments/smartglocal/smartglocal_api_client.cpp
View File

@@ -7,6 +7,8 @@ https://github.com/telegramdesktop/tdesktop/blob/master/LEGAL
*/
#include "smartglocal/smartglocal_api_client.h"
#include "base/basic_types.h"
#include "base/debug_log.h"
#include "smartglocal/smartglocal_error.h"
#include "smartglocal/smartglocal_token.h"
@@ -45,10 +47,26 @@ namespace {
}
[[nodiscard]] QString ComputeApiUrl(PaymentConfiguration configuration) {
const auto url = configuration.tokenizeUrl;
if (url.startsWith("https://")
&& url.endsWith(".smart-glocal.com/cds/v1/tokenize/card")) {
return url;
const auto url = QUrl(configuration.tokenizeUrl, QUrl::StrictMode);
const auto host = url.host();
const auto hostSuffix = u".smart-glocal.com"_q;
const auto encoded = url.toString(QUrl::FullyEncoded);
if (url.isValid()
&& url.scheme() == u"https"_q
&& host.size() > hostSuffix.size()
&& host.endsWith(hostSuffix)
&& url.authority(QUrl::FullyEncoded)
== url.host(QUrl::FullyEncoded)
&& url.path(QUrl::FullyEncoded)
== u"/cds/v1/tokenize/card"_q
&& !url.hasQuery()
&& !url.hasFragment()
&& encoded == configuration.tokenizeUrl) {
return encoded;
}
if (!configuration.tokenizeUrl.isEmpty()) {
LOG(("Payments Error: Discarding invalid tokenize_url: %1"
).arg(configuration.tokenizeUrl));
}
return QString("https://%1/%2")
.arg(APIURLBase(configuration.isTest))