Origin check tolerates http:// and http://www.

This commit is contained in:
lotodore
2013-10-07 22:43:03 +02:00
parent 1913947ec4
commit 2d6db51465
+3 -1
View File
@@ -78,7 +78,9 @@ ServerAcceptWebHelper::validate(websocketpp::connection_hdl hdl)
bool retVal = false;
server::connection_ptr con = m_webSocketServer->get_con_from_hdl(hdl);
if ((m_webSocketResource.empty() || con->get_resource() == m_webSocketResource)
&& (m_webSocketOrigin.empty() || (con->get_origin() != "null" && con->get_origin() == m_webSocketOrigin))) {
&& (m_webSocketOrigin.empty() ||
(con->get_origin() != "null" &&
(con->get_origin() == "http://" + m_webSocketOrigin || con->get_origin() == "http://www." + m_webSocketOrigin)))) {
retVal = true;
}
return retVal;