zotan/AutheliaMultiDomainProxy
1
0
Fork 0
Code Issues Pull requests Packages Projects Releases Wiki Activity

Fix permitted url checker

Browse source
This commit is contained in:
Laura Hausmann 2023-04-05 20:24:46 +02:00
parent 5ff4726f43
commit 681357759e
Signed by: zotan
GPG key ID: D044E84C5BE01605
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
Controllers/CookieProxyController.cs
View file

@ -12,7 +12,7 @@ public class CookieProxyController : Controller {
[Route("/api/cookieproxy_stage_one")]
public IActionResult StageOne([FromQuery] string tgt) {
// Check if we are on the correct domain
if (Request.Host.Host != $"{Vars.AuthProxySubdomain}.{Vars.UpstreamPrimaryDomain}")
if (Request.Host.Host != $"{Vars.AuthProxySubdomain}.{Vars.UpstreamPrimaryDomain}" && Vars.PermittedDomains.All(p => Request.Host.Host != $"{Vars.AuthProxySubdomain}.{p}"))
return StatusCode(StatusCodes.Status421MisdirectedRequest);
var dstDomain = AuthHelpers.GetRootDomain(tgt);