zotan/AutheliaMultiDomainProxy
1
0
Fork 0
Code Issues Pull requests Packages Projects Releases Wiki Activity

Fix hardened security checks

Browse source
This commit is contained in:
Laura Hausmann 2023-03-28 23:13:10 +02:00
parent b280eeba23
commit 627cd44d14
Signed by: zotan
GPG key ID: D044E84C5BE01605
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
Controllers/CookieProxyController.cs
View file

@ -12,7 +12,7 @@ public class CookieProxyController : Controller {
[Route("/api/cookieproxy_stage_one")]
public IActionResult StageOne([FromQuery] string dstDomain, [FromQuery] string tgt) {
// Check if we are on the correct domain
if (Request.Host.Host != Vars.AuthProxySubdomain + Vars.UpstreamPrimaryDomain)
if (Request.Host.Host != Vars.AuthProxySubdomain + "." + Vars.UpstreamPrimaryDomain)
return StatusCode(StatusCodes.Status421MisdirectedRequest);
if (!Request.Cookies.ContainsKey("authelia_session")