xibosignage / xibo-linux

Xibo for Linux - Digital Signage Player
https://xibo.org.uk/xibo-for-linux
GNU Affero General Public License v3.0
76 stars 54 forks source link

Required Files URL being decoded before making CDN request #275

Open dasgarner opened 1 year ago

dasgarner commented 1 year ago

A player wouldn't download the files it required. We discovered that the player is decoding the URL for the files before it makes a request to the CDN.

For example:

Original path: https://xxxx/index.php?dl=https%3A%2F%2Fexample.com%3A443%2Fxmds.php%3Ffile%3D47ab71be9d1740d11a3dfdaaesds41b2%26displayId%3D480%26type%3DM%26itemId%3D35sds8

Actual request: https://xxxx/index.php?dl=https://example.com:443/xmds.php?file=47ab71be9d1740d11a3dfdaaesds541b2&displayId=480&type=M&itemId=35sds8