mirror of
https://github.com/jupyter/notebook.git
synced 2024-12-27 04:20:22 +08:00
Handle variations of name for origin
This commit is contained in:
parent
e06f501cd6
commit
ddc9340a6a
@ -45,7 +45,15 @@ class ZMQStreamHandler(websocket.WebSocketHandler):
|
||||
|
||||
def same_origin(self):
|
||||
"""Check to see that origin and host match in the headers."""
|
||||
origin_header = self.request.headers.get("Origin")
|
||||
|
||||
# The difference between version 8 and 13 is that in 8 the
|
||||
# client sends a "Sec-Websocket-Origin" header and in 13 it's
|
||||
# simply "Origin".
|
||||
if self.request.headers.get("Sec-WebSocket-Version") in ("7", "8"):
|
||||
origin_header = self.request.headers.get("Sec-Websocket-Origin")
|
||||
else:
|
||||
origin_header = self.request.headers.get("Origin")
|
||||
|
||||
host = self.request.headers.get("Host")
|
||||
|
||||
# If no header is provided, assume we can't verify origin
|
||||
|
Loading…
Reference in New Issue
Block a user