details: https://code.openbravo.com/erp/devel/pi/rev/75e2d670435e
changeset: 30855:75e2d670435e
user: Martin Taal <martin.taal <at> openbravo.com>
date: Fri Dec 09 16:45:43 2016 +0100
summary: Related to issue 34331: Support pre-defined allowed domains for
cross-domain requests
Handle null origin
diffstat:
src/org/openbravo/base/secureApp/AllowedCrossDomainsHandler.java | 5 +++++
1 files changed, 5 insertions(+), 0 deletions(-)
diffs (15 lines):
diff -r 53dc443d6e17 -r 75e2d670435e
src/org/openbravo/base/secureApp/AllowedCrossDomainsHandler.java
--- a/src/org/openbravo/base/secureApp/AllowedCrossDomainsHandler.java Fri Dec
09 12:28:25 2016 +0100
+++ b/src/org/openbravo/base/secureApp/AllowedCrossDomainsHandler.java Fri Dec
09 16:45:43 2016 +0100
@@ -62,6 +62,11 @@
*/
public boolean fromAllowedOrigin(HttpServletRequest request) {
final String origin = request.getHeader("Origin");
+
+ if (origin == null) {
+ return false;
+ }
+
for (AllowedCrossDomainsChecker checker : getCheckers()) {
if (checker.isAllowedOrigin(request, origin)) {
return true;
------------------------------------------------------------------------------
Developer Access Program for Intel Xeon Phi Processors
Access to Intel Xeon Phi processor-based developer platforms.
With one year of Intel Parallel Studio XE.
Training and support from Colfax.
Order your platform today.http://sdm.link/xeonphi
_______________________________________________
Openbravo-commits mailing list
Openbravo-commits@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openbravo-commits
