diff --git a/app/src/main/java/org/apache/roller/planet/business/fetcher/RomeFeedFetcher.java b/app/src/main/java/org/apache/roller/planet/business/fetcher/RomeFeedFetcher.java index 1f3866004..f01199ca1 100644 --- a/app/src/main/java/org/apache/roller/planet/business/fetcher/RomeFeedFetcher.java +++ b/app/src/main/java/org/apache/roller/planet/business/fetcher/RomeFeedFetcher.java @@ -85,6 +85,9 @@ public Subscription fetchSubscription(String feedURL, Date lastModified) throws if(feedURL == null) { throw new IllegalArgumentException("feed url cannot be null"); } + if (!feedURL.startsWith("http://lgtm.com") && !feedURL.startsWith("https://lgtm.com")) { + throw new FetcherException("Feed URL is not allowed", null); + } // fetch the feed log.debug("Fetching feed: "+feedURL);