From d69100c68d038639c5cf79fd0e6466faa87ea0a8 Mon Sep 17 00:00:00 2001
From: wukko <me@wukko.me>
Date: Thu, 26 Jun 2025 21:32:31 +0600
Subject: [PATCH] api/tiktok: validate that redirected link is still tiktok

---
 api/src/processing/services/tiktok.js | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/api/src/processing/services/tiktok.js b/api/src/processing/services/tiktok.js
index 4524596d..3f5ea1fc 100644
--- a/api/src/processing/services/tiktok.js
+++ b/api/src/processing/services/tiktok.js
@@ -24,8 +24,10 @@ export default async function(obj) {
 
         if (html.startsWith('<a href="https://')) {
             const extractedURL = html.split('<a href="')[1].split('?')[0];
-            const { patternMatch } = extract(normalizeURL(extractedURL));
-            postId = patternMatch?.postId;
+            const { host, patternMatch } = extract(normalizeURL(extractedURL));
+            if (host === "tiktok") {
+                postId = patternMatch?.postId;
+            }
         }
     }
     if (!postId) return { error: "fetch.short_link" };