admin/spring-projects-spring-framework
1
0
Fork 0
mirror of https://github.com/spring-projects/spring-framework synced 2026-06-08 17:33:33 +00:00
Code Issues Packages Projects Releases Wiki Activity

Ignore trailing slash in Origin header

Browse Source 
See gh-26892
This commit is contained in:
Rossen Stoyanchev
2021-05-07 14:56:56 +01:00
parent 582b94d50e
commit dddcc5e9ad
4 changed files with 34 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files
spring-web/src/main/java/org/springframework/web/cors/CorsConfiguration.java
+3
View File
@@ -551,6 +551,9 @@ public class CorsConfiguration {
if (!StringUtils.hasText(requestOrigin)) {
return null;
}
if (requestOrigin.endsWith("/")) {
requestOrigin = requestOrigin.substring(0, requestOrigin.length() - 1);
}
if (!ObjectUtils.isEmpty(this.allowedOrigins)) {
if (this.allowedOrigins.contains(ALL)) {
validateAllowCredentials();