From 21bb2d40200fca6eb973efd0260ab7d67223f938 Mon Sep 17 00:00:00 2001
From: Jonathan Cremin <jonathan@crem.in>
Date: Mon, 6 Jun 2016 17:41:00 +0100
Subject: [PATCH] Ignore invalid resized image sizes

---
 web/routes/file.js | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/web/routes/file.js b/web/routes/file.js
index 47aa915..3091b84 100644
--- a/web/routes/file.js
+++ b/web/routes/file.js
@@ -27,6 +27,11 @@ function hotlinkCheck(file, userAgent, referrer) {
 }
 
 export function* get() {
+  if (this.params.size && ['150', '970'].indexOf(this.params.size) < 0) {
+    this.throw(404);
+    return;
+  }
+
   const file = yield this.db.Files.findOne({
     _id: this.params.id,
     file_name: this.params.name,