zervo/seb-win-refactoring
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

SEBWIN-427: Ensured seb(s) URLs are correctly handled for secure session reconfiguration.

Browse source
This commit is contained in:
Damian Büchel 2020-10-27 19:50:03 +01:00
parent 3698d7dabb
commit 7d55552889
1 changed files with 2 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
SafeExamBrowser.Client/ClientController.cs
View file

@ -341,8 +341,9 @@ namespace SafeExamBrowser.Client
{ {
var expression = Regex.Escape(Settings.Security.ReconfigurationUrl).Replace(@"\*", ".*"); var expression = Regex.Escape(Settings.Security.ReconfigurationUrl).Replace(@"\*", ".*");
var regex = new Regex($"^{expression}$", RegexOptions.IgnoreCase); var regex = new Regex($"^{expression}$", RegexOptions.IgnoreCase);
var sebUrl = args.Url.Replace(Uri.UriSchemeHttp, context.AppConfig.SebUriScheme).Replace(Uri.UriSchemeHttps, context.AppConfig.SebUriSchemeSecure);
allow = Settings.Security.AllowReconfiguration && regex.IsMatch(args.Url); allow = Settings.Security.AllowReconfiguration && (regex.IsMatch(args.Url) || regex.IsMatch(sebUrl));
} }
else else
{ {