ma27/hydra
0
0
Fork 0
forked from lix-project/hydra
Code Pull requests Activity

Fix referer check

Browse source
This commit is contained in:
Eelco Dolstra 2016-10-21 17:56:34 +02:00
parent c928c41ee1
commit 5d8fbc6ca1
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
src/lib/Hydra/Controller/Root.pm
View file

@ -66,7 +66,7 @@ sub begin :Private {
$referer //= $c->req->header('Referer');
my $base = $c->req->base;
error($c, "POST requests should come from ‘$base’")
unless defined $referer && $referer eq $base;
unless defined $referer && substr($referer, 0, length $base) eq $base;
}
$c->forward('deserialize');