Explicitly block photos from LBPMod.me (#907)

jvyden · web-flow · commit 68b52a763a2d · 2025-07-30T07:15:57.000-04:00
This website allows direct uploading of custom stickers. Since the
website announces itself we can just go ahead and block it for now,
since I'm seeing suspicious behavior relating to this. Config toggles
for this can be made for other instances on request.

I'm tired, boss.
diff --git a/Refresh.Interfaces.Game/Endpoints/PhotoEndpoints.cs b/Refresh.Interfaces.Game/Endpoints/PhotoEndpoints.cs
@@ -43,6 +43,12 @@ public Response UploadPhoto(RequestContext context, SerializedPhoto body, GameDa
             return BadRequest;
         }
 
+        if (body.PhotoSubjects.Any(s => s.Username.Equals("LBPMod.me", StringComparison.InvariantCultureIgnoreCase)))
+        {
+            context.Logger.LogWarning(BunkumCategory.UserContent, $"Photo contains disallowed subjects, rejecting photo upload. Uploader: {user.UserId}");
+            return Unauthorized;
+        }
+
         List<string> hashes = [body.LargeHash, body.MediumHash, body.SmallHash];
         foreach (string hash in hashes.Distinct())
         {

Original file line number	Diff line number	Diff line change
`@@ -43,6 +43,12 @@ public Response UploadPhoto(RequestContext context, SerializedPhoto body, GameDa`
`43`	`43`	`return BadRequest;`
`44`	`44`	`}`
`45`	`45`
	`46`	`+ if (body.PhotoSubjects.Any(s => s.Username.Equals("LBPMod.me", StringComparison.InvariantCultureIgnoreCase)))`
	`47`	`+ {`
	`48`	`+ context.Logger.LogWarning(BunkumCategory.UserContent, $"Photo contains disallowed subjects, rejecting photo upload. Uploader: {user.UserId}");`
	`49`	`+ return Unauthorized;`
	`50`	`+ }`
	`51`	`+`
`46`	`52`	`List<string> hashes = [body.LargeHash, body.MediumHash, body.SmallHash];`
`47`	`53`	`foreach (string hash in hashes.Distinct())`
`48`	`54`	`{`