Merge pull request #52 from fiatjaf/fix/imgproxy-invalid-token-404

Reject malformed imgproxy tokens with 404 instead of proxying empty URL

Author: mattn

imgproxy/handler.go

@@ -118,6 +118,10 @@ func pageHandler(w http.ResponseWriter, r *http.Request) {
 			}
 
 			imgproxyURL = "http://imgproxy/insecure" + path
+		} else {
+			// malformed token: reject instead of forwarding an empty URL
+			http.NotFound(w, r)
+			return
 		}
 
 		resp, err := imgproxySocketClient.Get(imgproxyURL)