From eff195aaa9bef1226999591e3b6501d3277dd4d7 Mon Sep 17 00:00:00 2001 From: Scott Battaglia Date: Sun, 22 Apr 2012 23:38:22 -0400 Subject: [PATCH] CASC-171 check x-forwarded host header --- .../java/org/jasig/cas/client/util/CommonUtils.java | 10 +++++++++- 1 file changed, 9 insertions(+), 1 deletion(-) diff --git a/cas-client-core/src/main/java/org/jasig/cas/client/util/CommonUtils.java b/cas-client-core/src/main/java/org/jasig/cas/client/util/CommonUtils.java index c1fc116..733393f 100644 --- a/cas-client-core/src/main/java/org/jasig/cas/client/util/CommonUtils.java +++ b/cas-client-core/src/main/java/org/jasig/cas/client/util/CommonUtils.java @@ -214,7 +214,15 @@ public final class CommonUtils { return serverName; } - final String comparisonHost = request.getHeader("Host"); + final String host = request.getHeader("Host"); + final String xHost = request.getHeader("X-Forwarded-Host"); + + final String comparisonHost; + if (xHost != null && host == "localhost") { + comparisonHost = xHost; + } else { + comparisonHost = host; + } if (comparisonHost == null) { return serverName;