chrissewell/pwnagotchi
1
0
Fork 0
mirror of https://github.com/jayofelony/pwnagotchi.git synced 2025-07-01 18:37:27 -04:00
Code Issues Packages Projects Releases Wiki Activity

Fix Origin header check bypass

Browse Source
This commit is contained in:
Kirill
2019-10-20 19:45:43 +03:00
committed by GitHub
parent cd5d783c52
commit 4653c5d95d
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
pwnagotchi/ui/web.py
View File

@ -141,7 +141,7 @@ class Handler(BaseHTTPRequestHandler):
return False return False
if Handler.AllowedOrigin != '*': if Handler.AllowedOrigin != '*':
if origin != Handler.AllowedOrigin and not origin.starts_with(Handler.AllowedOrigin): if origin != Handler.AllowedOrigin:
logging.warning("request with blocked Origin from %s: %s" % (self.address_string(), origin)) logging.warning("request with blocked Origin from %s: %s" % (self.address_string(), origin))
return False return False