vriska/hydra
0
0
Fork 0
forked from lix-project/hydra
Code Pull requests Activity

Handle Referer not having a trailing slash

Browse source 
Fixes #415.
This commit is contained in:
Eelco Dolstra 2016-11-01 11:00:30 +01:00
parent d6ccbeedbd
commit ef711ce845
1 changed files with 2 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
src/lib/Hydra/Controller/Root.pm
View file

@ -66,6 +66,8 @@ sub begin :Private {
my $referer = $c->req->header('Origin'); my $referer = $c->req->header('Origin');
$referer //= $c->req->header('Referer'); $referer //= $c->req->header('Referer');
my $base = $c->req->base; my $base = $c->req->base;
die unless $base =~ /\/$/;
$referer .= "/";
error($c, "POST requests should come from ‘$base’.") error($c, "POST requests should come from ‘$base’.")
unless defined $referer && substr($referer, 0, length $base) eq $base; unless defined $referer && substr($referer, 0, length $base) eq $base;
} }