Origin check tolerates http:// and http://www.
This commit is contained in:
@@ -78,7 +78,9 @@ ServerAcceptWebHelper::validate(websocketpp::connection_hdl hdl)
|
|||||||
bool retVal = false;
|
bool retVal = false;
|
||||||
server::connection_ptr con = m_webSocketServer->get_con_from_hdl(hdl);
|
server::connection_ptr con = m_webSocketServer->get_con_from_hdl(hdl);
|
||||||
if ((m_webSocketResource.empty() || con->get_resource() == m_webSocketResource)
|
if ((m_webSocketResource.empty() || con->get_resource() == m_webSocketResource)
|
||||||
&& (m_webSocketOrigin.empty() || (con->get_origin() != "null" && con->get_origin() == m_webSocketOrigin))) {
|
&& (m_webSocketOrigin.empty() ||
|
||||||
|
(con->get_origin() != "null" &&
|
||||||
|
(con->get_origin() == "http://" + m_webSocketOrigin || con->get_origin() == "http://www." + m_webSocketOrigin)))) {
|
||||||
retVal = true;
|
retVal = true;
|
||||||
}
|
}
|
||||||
return retVal;
|
return retVal;
|
||||||
|
|||||||
Reference in New Issue
Block a user