coolaj86/greenlock-express.js
1
0
Fork 0
Mirror von https://github.com/therootcompany/greenlock-express.js.git synchronisiert 2024-11-16 17:28:59 +00:00
Code Issues 1 Projekte Releases Wiki Aktivität

greenlock checks sni now

Quellcode durchsuchen
Dieser Commit ist enthalten in:
AJ ONeal 2018-08-16 02:44:10 -06:00
Ursprung 11e0db1f20
Commit aac54d63f2
1 geänderte Dateien mit 7 neuen und 10 gelöschten Zeilen
Statistiken anzeigen Patch-Datei herunterladen Vergleichs-Datei herunterladen Alle Dateien ausklappen Alle Dateien einklappen

17
examples/vhost.js
Datei anzeigen

@ -13,7 +13,8 @@ var fs = require('fs');
var finalhandler = require('finalhandler');
var serveStatic = require('serve-static');
var path = require('path');
var hostnameRe = /^[a-z0-9][\.a-z0-9\-]+$/;
// Allowed characters are a-z,0-9,.,-,_ with TLDs being alpha-only
var hostnameRe = /^[\.a-z0-9_\-]+\.[a-z]+$/i;
//require('greenlock-express')
require('../').create({
@ -39,17 +40,13 @@ require('../').create({
return;
}
// TODO could test for www/no-www both in directory and IP
var e;
// SECURITY Greenlock validates opts.domains ahead-of-time
var hostdir = path.join(srv, opts.domains[0]);
if (!hostnameRe.test(opts.domains[0])) {
e = new Error("rejecting '" + opts.domains[0] + "' because it is not a valid domain name");
cb(e);
return;
}
// TODO could test for www/no-www both in directory and IP
fs.readdir(hostdir, function (err, nodes) {
e = new Error("rejecting '" + opts.domains[0] + "' because '" + hostdir + "' could not be read");
var e;
if (err || !nodes) {
e = new Error("rejecting '" + opts.domains[0] + "' because '" + hostdir + "' could not be read");
console.error(err);
console.error(e);
cb(e);
@ -74,7 +71,7 @@ require('../').create({
, app: function (req, res) {
console.log(req.headers.host);
var hostname = (req.headers.host||'').toLowerCase().split(':')[0];
// sanatize hostname to prevent unauthorized fs access
// SECURITY sanatize hostname to prevent unauthorized fs access
if (!hostnameRe.test(hostname)) {
res.statusCode = 404;
res.end('Bad Hostname');