ahuston-0/hydra
1
0
Fork 0
Code Issues Pull Requests 1 Packages Projects Releases Wiki Activity

Fix referer check

Browse Source
This commit is contained in:
Eelco Dolstra 2016-10-21 17:56:34 +02:00
parent c928c41ee1
commit 5d8fbc6ca1
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
src/lib/Hydra/Controller/Root.pm
View File

@ -66,7 +66,7 @@ sub begin :Private {
$referer //= $c->req->header('Referer'); $referer //= $c->req->header('Referer');
my $base = $c->req->base; my $base = $c->req->base;
error($c, "POST requests should come from ‘$base’") error($c, "POST requests should come from ‘$base’")
unless defined $referer && $referer eq $base; unless defined $referer && substr($referer, 0, length $base) eq $base;
} }
$c->forward('deserialize'); $c->forward('deserialize');