From 6559aaf1d45b4bcdde7fdf69e967efd8ea521357 Mon Sep 17 00:00:00 2001 From: Chris Boden Date: Mon, 5 Aug 2013 16:23:38 -0400 Subject: [PATCH] [Http] Fixed bug in Origin check - browser may pass http:// --- src/Ratchet/Http/OriginCheck.php | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/src/Ratchet/Http/OriginCheck.php b/src/Ratchet/Http/OriginCheck.php index 580935a..8d5f7a1 100644 --- a/src/Ratchet/Http/OriginCheck.php +++ b/src/Ratchet/Http/OriginCheck.php @@ -31,7 +31,8 @@ class OriginCheck implements HttpServerInterface { * {@inheritdoc} */ public function onOpen(ConnectionInterface $conn, RequestInterface $request = null) { - $origin = (string)$request->getHeader('Origin'); + $header = (string)$request->getHeader('Origin'); + $origin = parse_url($header, PHP_URL_HOST) ?: $header; if (!in_array($origin, $this->allowedOrigins)) { return $this->close($conn, 403);