prosody-modules
97375a78d2b5
mod_http_hostaliases/mod_http_hostaliases.lua

Find changesets by keywords by author, files, the commit message, revision number or hash, or revset expression.

Software / code / prosody-modules

File

mod_http_hostaliases/mod_http_hostaliases.lua @ 5984:97375a78d2b5

mod_http_oauth2: Reject URLs with 'userinfo' part (thanks mimi89999) The LuaSocket parser supports these but they're deprecated without replacement by RFC 3986 > Use of the format "user:password" in the userinfo field is deprecated Allowing it in OAuth2 URLs is probably bad from a security perspective.
author Kim Alvefur <zash@zash.se>
date Thu, 29 Aug 2024 16:02:46 +0200
parent 2265:29e3a09275c5
line wrap: on
line source

module:set_global();

local host_map = { };

module:wrap_object_event(require "net.http.server"._events, false, function (handlers, event_name, event_data)
	local verb, host, path = event_name:match("^(%w+ )(.-)(/.*)");
	host = host_map[host];
	event_name = verb .. host .. path;
	return handlers(event_name, event_data);
end);

function module.add_host(module)
	local http_host = module:get_option_string("http_host");
	for host in module:get_option_set("http_host_aliases", {}) do
		host_map[host] = http_host;
	end
end