From 7d55552889b7fb7f6855826d091b566e2412ab9d Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Damian=20B=C3=BCchel?= Date: Tue, 27 Oct 2020 19:50:03 +0100 Subject: [PATCH] SEBWIN-427: Ensured seb(s) URLs are correctly handled for secure session reconfiguration. --- SafeExamBrowser.Client/ClientController.cs | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/SafeExamBrowser.Client/ClientController.cs b/SafeExamBrowser.Client/ClientController.cs index 94e184fc..b0220554 100644 --- a/SafeExamBrowser.Client/ClientController.cs +++ b/SafeExamBrowser.Client/ClientController.cs @@ -341,8 +341,9 @@ namespace SafeExamBrowser.Client { var expression = Regex.Escape(Settings.Security.ReconfigurationUrl).Replace(@"\*", ".*"); var regex = new Regex($"^{expression}$", RegexOptions.IgnoreCase); + var sebUrl = args.Url.Replace(Uri.UriSchemeHttp, context.AppConfig.SebUriScheme).Replace(Uri.UriSchemeHttps, context.AppConfig.SebUriSchemeSecure); - allow = Settings.Security.AllowReconfiguration && regex.IsMatch(args.Url); + allow = Settings.Security.AllowReconfiguration && (regex.IsMatch(args.Url) || regex.IsMatch(sebUrl)); } else {