zzstoatzz.io
-9
frontend/src/lib/moderation.svelte.ts
-9
frontend/src/lib/moderation.svelte.ts
···
15
15
/**
16
16
* check if an image URL is flagged as sensitive.
17
17
* checks both the full URL and extracts image_id from R2 URLs.
18
-
* also flags non-R2 images as sensitive since they could be injected.
19
18
*/
20
19
isSensitive(url: string | null | undefined): boolean {
21
20
if (!url) return false;
22
21
23
22
// check full URL match
24
23
if (this.data.urls.has(url)) return true;
25
-
26
-
// check if it's a known R2 URL pattern
27
-
const isR2 = url.includes('r2.dev/') || url.includes('cdn.plyr.fm/');
28
-
29
-
if (!isR2) {
30
-
// non-R2 images are treated as sensitive - could be injected
31
-
return true;
32
-
}
33
24
34
25
// extract image_id from R2 URL patterns:
35
26
// - https://pub-*.r2.dev/{image_id}.{ext}