fix(storage): enforce target and ref checking for stats

1 files changed, 6 insertions, 0 deletions

diff --git a/backend/storage/stats.go b/backend/storage/stats.go
index 76d1c82..345164e 100644
--- a/backend/storage/stats.go
+++ b/backend/storage/stats.go
@@ -57,6 +57,9 @@ const HumanPageLoad = "/assets/styles.css"
 
 func UpdateStats(ctx context.Context, r *http.Request, domain string) error {
 	target := r.URL.Path
+	if !strings.HasPrefix(target, "/") {
+		target = "/" + target
+	}
 	if strings.HasPrefix(target, "/admin") {
 		return nil
 	}
@@ -71,6 +74,9 @@ func UpdateStats(ctx context.Context, r *http.Request, domain string) error {
 	ref = refUrl.Host
 	if ref == domain || ref == fmt.Sprintf("localhost:%d", 8000) {
 		ref = refUrl.Path
+		if !strings.HasPrefix(ref, "/") {
+			ref = "/" + ref
+		}
 		if ref == target || strings.HasPrefix(ref, "/admin") || ref == "/favicon.ico" {
 			return nil
 		}