meowing.zip / iceshrimp.net
a fork of iceshrimp.net but a tweaked frontend to my personal liking. waow
fediverse social-media social iceshrimp fedi
0
fork

Configure Feed

Select the types of activity you want to include in your feed.

fix: allow requests with 'ws' and 'wss' schemes

authored by

elizabeth and committed by
Iceshrimp development 04deedb0 a3fb2cad

+1 -1
+1 -1
Iceshrimp.Backend/Core/Middleware/RequestVerificationMiddleware.cs
··· 25 25 public bool IsValid(HttpRequest rq) 26 26 { 27 27 // Mitigate malicious X-Forwarded-Proto values (https://github.com/greenpau/caddy-security/issues/270) 28 - if (!rq.Scheme.EqualsIgnoreCase("http") && !rq.Scheme.EqualsIgnoreCase("https")) 28 + if (!rq.Scheme.EqualsIgnoreCase("http") && !rq.Scheme.EqualsIgnoreCase("https") && !rq.Scheme.EqualsIgnoreCase("ws") && !rq.Scheme.EqualsIgnoreCase("wss")) 29 29 { 30 30 logger.LogWarning("Received request with invalid scheme: '{scheme}', please check your reverse proxy configuration", 31 31 rq.Scheme);