the-distro/hydra
1
0
Fork 0
forked from lix-project/hydra
Code Pull requests Activity

Fix referer check

Browse source
This commit is contained in:
Eelco Dolstra 2016-10-21 17:56:34 +02:00
parent c928c41ee1
commit 5d8fbc6ca1
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
src/lib/Hydra/Controller/Root.pm
View file

@ -66,7 +66,7 @@ sub begin :Private {
$referer //= $c->req->header('Referer'); $referer //= $c->req->header('Referer');
my $base = $c->req->base; my $base = $c->req->base;
error($c, "POST requests should come from ‘$base’") error($c, "POST requests should come from ‘$base’")
unless defined $referer && $referer eq $base; unless defined $referer && substr($referer, 0, length $base) eq $base;
} }
$c->forward('deserialize'); $c->forward('deserialize');