Add flags verification

fetchupd.php

@@ -25,10 +25,12 @@ function uupApiPrivateParseFlags($str) {
     $split = explode('+', $str);
     $flags = [];
 
-    if(isset($split[1]))
-        $flags = explode(',', strtolower($split[1]));
+    if(isset($split[1])) {
+        $flags = array_unique(explode(',', strtolower($split[1])));
+        $flagsSafe = array_intersect(getAllowedFlags(), $flags);
+    }
 
-    return [$split[0], $flags];
+    return [$split[0], $flagsSafe];
 }
 
 function uupApiPrivateGetLatestBuild() {

shared/main.php

@@ -16,7 +16,7 @@ limitations under the License.
 */
 
 function uupApiVersion() {
-    return '1.43.2';
+    return '1.43.3';
 }
 
 require_once dirname(__FILE__).'/auths.php';

shared/utils.php

@@ -190,3 +190,12 @@ function uupApiConfigIsTrue($config) {
 
     return $data[$config] == true;
 }
+
+function getAllowedFlags() {
+    $flags = ['thisonly'];
+
+    if(uupApiConfigIsTrue('allow_corpnet'))
+        $flags[] = 'corpnet';
+
+    return $flags;
+}