Fix signature verification with image resizing on v1 (#2899)

Author: SamyPesse

packages/gitbook-v2/src/lib/images/createImageResizer.ts

@@ -66,7 +66,6 @@ export function createImageResizer({
  linker.toAbsoluteURL(linker.toPathInContent('/~gitbook/image'))
  );
  url.searchParams.set('url', getImageAPIUrl(urlInput));
- url.searchParams.set('host', host);
 
  if (options.width) {
  url.searchParams.set('width', options.width.toString());

packages/gitbook/src/routes/image.ts

@@ -37,16 +37,21 @@ export async function serveResizedImage(request: Request) {
  }
 
  // Verify the signature
+ const host =
+ request.headers.get('x-gitbook-host') ??
+ request.headers.get('x-forwarded-host') ??
+ request.headers.get('host') ??
+ requestURL.host;
  const verified = await verifyImageSignature(
  {
  url,
- host: requestURL.host,
+ host,
  },
  { signature, version: signatureVersion }
  );
  if (!verified) {
  return new Response(
- `Invalid signature "${signature ?? ''}" (version ${signatureVersion}) for "${url}" on "${requestURL.host}"`,
+ `Invalid signature "${signature ?? ''}" (version ${signatureVersion}) for "${url}" on "${host}"`,
  { status: 400 }
  );
  }