TouchInstinct
/
java-cas-client
303
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

CASC-171 

check x-forwarded host header
This commit is contained in:
Scott Battaglia 2012-04-22 23:38:22 -04:00
parent 7302ca6a99
commit eff195aaa9
1 changed files with 9 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
cas-client-core/src/main/java/org/jasig/cas/client/util/CommonUtils.java
View File

@ -214,7 +214,15 @@ public final class CommonUtils {
return serverName;
}
final String comparisonHost = request.getHeader("Host");
final String host = request.getHeader("Host");
final String xHost = request.getHeader("X-Forwarded-Host");
final String comparisonHost;
if (xHost != null && host == "localhost") {
comparisonHost = xHost;
} else {
comparisonHost = host;
}
if (comparisonHost == null) {
return serverName;