MDL-26910 add HTTPD server name whitelisting
This commit is contained in:
@@ -772,6 +772,10 @@ function setup_get_remote_url() {
|
||||
//LiteSpeed - not officially supported
|
||||
$rurl['fullpath'] = $_SERVER['REQUEST_URI']; // TODO: verify this is always properly encoded
|
||||
|
||||
} else if ($_SERVER['SERVER_SOFTWARE'] === 'HTTPD') {
|
||||
//obscure name found on some servers - this is definitely not supported
|
||||
$rurl['fullpath'] = $_SERVER['REQUEST_URI']; // TODO: verify this is always properly encoded
|
||||
|
||||
} else {
|
||||
throw new moodle_exception('unsupportedwebserver', 'error', '', $_SERVER['SERVER_SOFTWARE']);
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user