coolaj86
/
greenlock.js-ARCHIVED
3
3
Fork 0
Code Issues 6 Pull Requests 1 Releases Activity

v2.4.2 proactive domain fronting protection

This commit is contained in:
AJ ONeal 2018-08-24 23:38:00 -06:00
parent 2cfba7a2e7
commit 8c32887b10
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
index.js
View File

@ -517,7 +517,7 @@ Greenlock.create = function (gl) {
req.headers.host = host.join(':'); req.headers.host = host.join(':');
} }
if (gl.__sni_allow_fronting) { if (!gl.__sni_allow_domain_fronting) {
if (req.socket && 'string' === typeof req.socket.servername) { if (req.socket && 'string' === typeof req.socket.servername) {
if (safehost && (safehost !== req.socket.servername.toLowerCase())) { if (safehost && (safehost !== req.socket.servername.toLowerCase())) {
res.statusCode = 400; res.statusCode = 400;