v2.4.2 proactive domain fronting protection
This commit is contained in:
parent
2cfba7a2e7
commit
8c32887b10
2
index.js
2
index.js
|
@ -517,7 +517,7 @@ Greenlock.create = function (gl) {
|
|||
req.headers.host = host.join(':');
|
||||
}
|
||||
|
||||
if (gl.__sni_allow_fronting) {
|
||||
if (!gl.__sni_allow_domain_fronting) {
|
||||
if (req.socket && 'string' === typeof req.socket.servername) {
|
||||
if (safehost && (safehost !== req.socket.servername.toLowerCase())) {
|
||||
res.statusCode = 400;
|
||||
|
|
Loading…
Reference in New Issue