Андрей (andy) wrote in changelog,
Андрей
andy
changelog

[livejournal] r17974: LJINT-362 (Comments for side projects): ...

Committer: ailyin
LJINT-362 (Comments for side projects): checkpoint commit; the scheme with redirects/iframes works now
U   trunk/htdocs/gadgets/logcom.bml
Modified: trunk/htdocs/gadgets/logcom.bml
===================================================================
--- trunk/htdocs/gadgets/logcom.bml	2010-12-20 07:28:24 UTC (rev 17973)
+++ trunk/htdocs/gadgets/logcom.bml	2010-12-20 07:41:49 UTC (rev 17974)
@@ -26,6 +26,36 @@
     my $journal = LJ::load_user($username);
     return "unknown user" unless $journal;
 
+    return 'rate limit exceeded'
+        unless LJ::RateLimit->check( $journal,
+                                     $LJ::PARTNER_RATE_LIMITS{$username} );
+
+    my $domains = $LJ::PARTNER_DOMAINS{$username};
+    my $domains_out = LJ::JSON->to_json($domains);
+    my $js_check_domain = qq[
+        <script type="text/javascript">
+        var trustedDomains = $domains_out;
+            
+        var domainMatch = checkDomain(window.location.href, trustedDomains);
+
+        if (!domainMatch) {
+            window.location.href = 'about:blank';
+        }
+
+        function checkDomain(href, trustedDomains) {
+            var currentDomain = href.match(] .q{/(http\:\/\/)(?:www\.)?([^\/]*)/} . qq[)[2];
+            
+            for (var i = 0, l = trustedDomains.length; i < l; i++) {
+                if (trustedDomains[i] == currentDomain) {
+                    return true;
+                }
+            }
+            
+            return false;
+        }
+        </script>
+    ];
+
     ## convert article's uri on partners site to entryid on LJ.com
     my $jitemid = LJ::ExternalComments->url_to_jitemid($journal, $url);
     unless ($jitemid){

Tags: andy, bml, livejournal
Subscribe
  • Post a new comment

    Error

    Anonymous comments are disabled in this journal

    default userpic

    Your reply will be screened

    Your IP address will be recorded 

  • 0 comments