From 6b4703f21deb0f140dbbeca682823f2b644a4e78 Mon Sep 17 00:00:00 2001
From: Dirk Engling <erdgeist@erdgeist.org>
Date: Thu, 5 Nov 2026 14:35:32 +0100
Subject: Actually implement the OT_PERMISSION_MAY_FULLSCRAPE mechanics and add
 a config file entry

---
 src/ot_http.c | 5 +++++
 1 file changed, 5 insertions(+)

(limited to 'src/ot_http.c')

diff --git a/src/ot_http.c b/src/ot_http.c
index 533a876..d2dad67 100644
--- a/src/ot_http.c
+++ b/src/ot_http.c
@@ -402,6 +402,11 @@ static ssize_t http_handle_fullscrape(const int64_t sock, struct ot_workstruct *
   struct http_data *cookie = fdstate_cookie(sock);
   int               format = 0;
 
+#ifdef WANT_RESTRICT_FULLSCRAPE
+  if (!accesslist_is_blessed(cookie->ip, OT_PERMISSION_MAY_FULLSCRAPE))
+    HTTPERROR_403_IP;
+#endif
+
 #ifdef WANT_MODEST_FULLSCRAPES
   {
     ot_scrape_log this_peer, *new_peer;
-- 
cgit v1.3