scifijunkie/pwnagotchi
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Fix Origin header check bypass

Browse Source
This commit is contained in:
Kirill 2019-10-20 19:45:43 +03:00 committed by GitHub
parent cd5d783c52
commit 4653c5d95d
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 1 additions and 1 deletions

2
pwnagotchi/ui/web.py

@ -141,7 +141,7 @@ class Handler(BaseHTTPRequestHandler):
return False
if Handler.AllowedOrigin != '*':
if origin != Handler.AllowedOrigin and not origin.starts_with(Handler.AllowedOrigin):
if origin != Handler.AllowedOrigin:
logging.warning("request with blocked Origin from %s: %s" % (self.address_string(), origin))
return False