This commit is contained in:
Alexandre Aubin 2024-01-30 19:05:56 +01:00
parent 0566f31c4b
commit d0683f01c4

View file

@ -122,7 +122,7 @@ function check_authentication()
-- Check the host the cookie was meant to does match the request
-- (this should never happen except if somehow a malicious user manually tries
-- to use a cookie that was delivered from a different domain)
if host ~= ngx.var.host and not string.endswith(ngx.var.host, "." .. host) then
if host ~= ngx.var.host and not string.ends(ngx.var.host, "." .. host) then
return false, nil, nil
end