From 90bac42edbfece6c53fce4fe4d4cdf4e911672ff Mon Sep 17 00:00:00 2001 From: Robert Swain Date: Fri, 28 Apr 2017 17:14:16 +0200 Subject: [PATCH] mediaapi/writers/download: Only accept GET method --- .../matrix-org/dendrite/mediaapi/writers/download.go | 10 +++++++++- 1 file changed, 9 insertions(+), 1 deletion(-) diff --git a/src/github.com/matrix-org/dendrite/mediaapi/writers/download.go b/src/github.com/matrix-org/dendrite/mediaapi/writers/download.go index 775779a91..239eb294d 100644 --- a/src/github.com/matrix-org/dendrite/mediaapi/writers/download.go +++ b/src/github.com/matrix-org/dendrite/mediaapi/writers/download.go @@ -72,10 +72,18 @@ func jsonErrorResponse(w http.ResponseWriter, res util.JSONResponse, logger *log w.Write(resBytes) } -// Download implements /upload +// Download implements /download func Download(w http.ResponseWriter, req *http.Request, serverName string, mediaID string, cfg config.MediaAPI, db *storage.Database, downloadServer DownloadServer) { logger := util.GetLogger(req.Context()) + if req.Method != "GET" { + jsonErrorResponse(w, util.JSONResponse{ + Code: 405, + JSON: jsonerror.Unknown("request method must be GET"), + }, logger) + return + } + r := &DownloadRequest{ MediaID: mediaID, ServerName: serverName,