Make check_referer work for https pages.
Patch by kareila.
diffs (16 lines):
diff -r ad0e788374b0 -r 583554f604c4 cgi-bin/weblib.pl
--- a/cgi-bin/weblib.pl Thu Jun 24 15:49:10 2010 +0800
+++ b/cgi-bin/weblib.pl Thu Jun 24 16:06:18 2010 +0800
@@ -552,10 +552,11 @@ sub check_referer {
}
return 1 if $LJ::SITEROOT && $referer =~ m!^\Q$LJ::SITEROOT\E$uri!;
+ return 1 if $LJ::SSLROOT && $referer =~ m!^\Q$LJ::SSLROOT\E$uri!;
return 1 if $LJ::DOMAIN && $referer =~ m!^http://\Q$LJ::DOMAIN\E$uri!;
return 1 if $LJ::DOMAIN_WEB && $referer =~
m!^http://\Q$LJ::DOMAIN_WEB\E$uri!;
return 1 if $LJ::USER_VHOSTS && $referer =~
m!^http://([A-Za-z0-9_\-]{1,25})\.\Q$LJ::DOMAIN\E$uri!;
- return 1 if $origuri =~ m!^http://! && $origreferer eq $origuri;
+ return 1 if $origuri =~ m!^https?://! && $origreferer eq $origuri;
return undef;
}
_______________________________________________
dw-changelog mailing list
[email protected]
http://lists.dwscoalition.org/mailman/listinfo/dw-changelog
