Fix referer check

2016-10-21 17:56:34 +02:00 · 2016-10-21 17:56:34 +02:00 · 5d8fbc6ca1
parent c928c41ee1
commit 5d8fbc6ca1
1 changed files with 1 additions and 1 deletions
--- a/src/lib/Hydra/Controller/Root.pm
+++ b/src/lib/Hydra/Controller/Root.pm
@ -66,7 +66,7 @@ sub begin :Private {
        $referer //= $c->req->header('Referer');
        my $base = $c->req->base;
        error($c, "POST requests should come from ‘$base’")
-            unless defined $referer && $referer eq $base;
+            unless defined $referer && substr($referer, 0, length $base) eq $base;
    }

    $c->forward('deserialize');