allow origin header to be relayed
Simon Smith committed
Sep 17, 2022 at 12:01 UTC
c8508f1c943ff93eca6745fe06f6f8a7484d4a7e
1 file changed
+2
-2
apprelays.js
+2
-2
@@ -282,7 +282,7 @@ module.exports.CreateWebRelay = function (parent, db, args, domain) {
282
283
// Construct the HTTP request
284
var request = req.method + ' ' + req.url + ' HTTP/' + req.httpVersion + '\r\n';
285
- const blockedHeaders = ['origin', 'cookie', 'upgrade-insecure-requests', 'sec-ch-ua', 'sec-ch-ua-mobile', 'dnt', 'sec-fetch-user', 'sec-ch-ua-platform', 'sec-fetch-site', 'sec-fetch-mode', 'sec-fetch-dest']; // These are headers we do not forward
285
+ const blockedHeaders = ['cookie', 'upgrade-insecure-requests', 'sec-ch-ua', 'sec-ch-ua-mobile', 'dnt', 'sec-fetch-user', 'sec-ch-ua-platform', 'sec-fetch-site', 'sec-fetch-mode', 'sec-fetch-dest']; // These are headers we do not forward
286
for (var i in req.headers) { if (blockedHeaders.indexOf(i) == -1) { request += i + ': ' + req.headers[i] + '\r\n'; } }
287
var cookieStr = '';
288
for (var i in parent.webCookies) { if (cookieStr != '') { cookieStr += '; ' } cookieStr += (i + '=' + parent.webCookies[i].value); }
@@ -331,7 +331,7 @@ module.exports.CreateWebRelay = function (parent, db, args, domain) {
331
332
// Construct the HTTP request
333
var request = req.method + ' ' + req.url + ' HTTP/' + req.httpVersion + '\r\n';
334
- const blockedHeaders = ['origin', 'cookie', 'sec-websocket-extensions']; // These are headers we do not forward
334
+ const blockedHeaders = ['cookie', 'sec-websocket-extensions']; // These are headers we do not forward
335
for (var i in req.headers) { if (blockedHeaders.indexOf(i) == -1) { request += i + ': ' + req.headers[i] + '\r\n'; } }
336
var cookieStr = '';
337
for (var i in parent.webCookies) { if (cookieStr != '') { cookieStr += '; ' } cookieStr += (i + '=' + parent.webCookies[i].value); }