Fixed web relay host header.
Ylian Saint-Hilaire committed
Jul 5, 2022 at 13:25 UTC
6920134caf787706b41ffd9bc982a00d2e13f320
1 file changed
+1
-2
apprelays.js
+1
-2
@@ -223,8 +223,7 @@ module.exports.CreateWebRelay = function (parent, db, args, domain) {
223
224
// Construct the HTTP request
225
var request = req.method + ' ' + req.url + ' HTTP/' + req.httpVersion + '\r\n';
226
- const blockedHeaders = ['host', 'origin', 'cookie', 'upgrade-insecure-requests', 'sec-ch-ua', 'sec-ch-ua-mobile', 'dnt', 'sec-fetch-user', 'sec-ch-ua-platform', 'sec-fetch-site', 'sec-fetch-mode', 'sec-fetch-dest']; // These are headers we do not forward
227
- request += 'host: central.mesh.meshcentral.com\r\n';
226
+ const blockedHeaders = ['origin', 'cookie', 'upgrade-insecure-requests', 'sec-ch-ua', 'sec-ch-ua-mobile', 'dnt', 'sec-fetch-user', 'sec-ch-ua-platform', 'sec-fetch-site', 'sec-fetch-mode', 'sec-fetch-dest']; // These are headers we do not forward
227
for (var i in req.headers) { if (blockedHeaders.indexOf(i) == -1) { request += i + ': ' + req.headers[i] + '\r\n'; } }
228
var cookieStr = '';
229
for (var i in parent.webCookies) { if (cookieStr != '') { cookieStr += '; ' } cookieStr += (i + '=' + parent.webCookies[i].value); }