ambidextrous/gemp-lotr
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Checking Origin header, only if it is sent in.

Browse Source
This commit is contained in:
marcin.sciesinski
2020-05-06 02:10:03 -07:00
parent ef4acdde24
commit 42a6a2fccd
1 changed files with 5 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
gemp-lotr/gemp-lotr-async/src/main/java/com/gempukku/lotro/async/handler/RootUriRequestHandler.java
View File

@@ -4,6 +4,7 @@ import com.gempukku.lotro.async.HttpProcessingException;
import com.gempukku.lotro.async.ResponseWriter;
import com.gempukku.lotro.common.ApplicationConfiguration;
import org.jboss.netty.channel.MessageEvent;
import org.jboss.netty.handler.codec.http.HttpMethod;
import org.jboss.netty.handler.codec.http.HttpRequest;
import java.lang.reflect.Type;
@@ -74,8 +75,10 @@ public class RootUriRequestHandler implements UriRequestHandler {
_statusRequestHandler.handleRequest(uri.substring(_serverContextPath.length()), request, context, responseWriter, e);
} else {
String origin = request.getHeader("Origin");
if (origin == null || !originPattern.matcher(origin).matches())
throw new HttpProcessingException(403);
if (origin != null) {
if (!originPattern.matcher(origin).matches())
throw new HttpProcessingException(403);
}
// These APIs are protected by same Origin protection
if (uri.startsWith(_serverContextPath + "hall")) {