hex/wstunnel
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

support multiple --restrict-http-upgrade-path-prefix

Browse source
This commit is contained in:
Σrebe - Romain GERARD 2023-12-03 22:32:05 +01:00
parent 592fab9406
commit 3eba7d8771
No known key found for this signature in database
GPG key ID: 7A42B4B97E0332F4
3 changed files with 20 additions and 9 deletions
Download patch file Download diff file Expand all files Collapse all files

9
src/tunnel/server.rs
View file

@ -202,12 +202,15 @@ async fn server_upgrade(
.unwrap_or_default());
}
if let Some(path_prefix) = &server_config.restrict_http_upgrade_path_prefix {
if let Some(paths_prefix) = &server_config.restrict_http_upgrade_path_prefix {
let path = req.uri().path();
let min_len = min(path.len(), 1);
let max_len = min(path.len(), path_prefix.len() + 1);
let mut max_len = 0;
if &path[0..min_len] != "/"
|| &path[min_len..max_len] != path_prefix.as_str()
|| !paths_prefix.iter().any(|p| {
max_len = min(path.len(), p.len() + 1);
p == &path[min_len..max_len]
})
|| !path[max_len..].starts_with('/')
{
warn!("Rejecting connection with bad path prefix in upgrade request: {}", req.uri());