deepcrayon/lila
deepcrayon/lila
1
0
Fork 0
Code Releases Activity

redirect socket domain

Browse source
This commit is contained in:
Thibault Duplessis 2019-09-16 17:50:15 +02:00
parent 5bb2d3379b
commit f17ae40e31
1 changed files with 6 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

7
app/controllers/LilaController.scala
View file

@ -444,9 +444,14 @@ private[controllers] trait LilaController
protected val csrfCheck = Env.security.csrfRequestHandler.check _
protected val csrfForbiddenResult = Forbidden("Cross origin request forbidden").fuccess
private val httpDomain = Env.api.Net.Domain
private val socketDomain = Env.api.Net.SocketDomain
private def CSRF(req: RequestHeader)(f: => Fu[Result]): Fu[Result] =
if (csrfCheck(req)) f else csrfForbiddenResult
if (req.host == socketDomain && HTTPRequest.isRedirectable(req))
MovedPermanently(s"http${if (req.secure) "s" else ""}://$httpDomain${req.uri}").fuccess
else if (csrfCheck(req)) f
else csrfForbiddenResult
protected def XhrOnly(res: => Fu[Result])(implicit ctx: Context) =
if (HTTPRequest isXhr ctx.req) res else notFound