Upload protected from outside

Builder/IISMainHandler/build.txt

@@ -1 +1 @@
-1736
+1740

IISMainHandler/handlers/response/UploadHandler.cs

@@ -19,6 +19,11 @@ namespace FLocal.IISHandler.handlers.response {
 		}
 
 		protected override string getRedirectUrl(WebContext context) {
+			Uri referer = context.httprequest.UrlReferrer;
+			if(referer == null || referer.Host != context.httprequest.Url.Host) {
+				throw new AccessViolationException();
+			}
+
 			return Config.instance.UploaderUrl + "Data/" + this.url.upload.hash + "." + this.url.upload.extension;
 		}
 

IISMainHandler/handlers/response/UploadInfoHandler.cs

@@ -19,6 +19,9 @@ namespace FLocal.IISHandler.handlers.response {
 		}
 
 		protected override IEnumerable<XElement> getSpecificData(WebContext context) {
+			if(context.session == null) {
+				throw new AccessViolationException();
+			}
 			return new XElement[] {
 				this.url.upload.exportToXml(context),
 			};