Docker/portainer
Docker/portainer
1
0
Fork 0
mirror of https://github.com/portainer/portainer.git synced 2025-07-24 07:49:41 +02:00
Code Issues Releases Activity

fix(csrf): skip the trusted origins check for plain-text HTTP requests BE-11832 (#710)

Browse source 
Co-authored-by: andres-portainer <andres-portainer@users.noreply.github.com>
Co-authored-by: oscarzhou <oscar.zhou@portainer.io>
This commit is contained in:
andres-portainer 2025-05-08 23:39:29 -03:00 • committed by GitHub
parent b9b734ceda
commit 9fdc535d6b
4 changed files with 40 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

2
api/http/server.go
View file

@ -349,7 +349,7 @@ func (server *Server) Start() error {
log.Info().Str("bind_address", server.BindAddress).Msg("starting HTTP server")
httpServer := &http.Server{
Addr: server.BindAddress,
Handler: handler,
Handler: middlewares.PlaintextHTTPRequest(handler),
ErrorLog: errorLogger,
}