Commit 54790977 authored by Bas van Kervel's avatar Bas van Kervel

rpc: HTTP origin case insensitive

parent 57ba1824
...@@ -61,22 +61,22 @@ func wsHandshakeValidator(allowedOrigins []string) func(*websocket.Config, *http ...@@ -61,22 +61,22 @@ func wsHandshakeValidator(allowedOrigins []string) func(*websocket.Config, *http
allowAllOrigins = true allowAllOrigins = true
} }
if origin != "" { if origin != "" {
origins.Add(origin) origins.Add(strings.ToLower(origin))
} }
} }
// allow localhost if no allowedOrigins are specified // allow localhost if no allowedOrigins are specified.
if len(origins.List()) == 0 { if len(origins.List()) == 0 {
origins.Add("http://localhost") origins.Add("http://localhost")
if hostname, err := os.Hostname(); err == nil { if hostname, err := os.Hostname(); err == nil {
origins.Add("http://" + hostname) origins.Add("http://" + strings.ToLower(hostname))
} }
} }
glog.V(logger.Debug).Infof("Allowed origin(s) for WS RPC interface %v\n", origins.List()) glog.V(logger.Debug).Infof("Allowed origin(s) for WS RPC interface %v\n", origins.List())
f := func(cfg *websocket.Config, req *http.Request) error { f := func(cfg *websocket.Config, req *http.Request) error {
origin := req.Header.Get("Origin") origin := strings.ToLower(req.Header.Get("Origin"))
if allowAllOrigins || origins.Has(origin) { if allowAllOrigins || origins.Has(origin) {
return nil return nil
} }
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment