Fixed: Security Vulnerabilities allowing authentication to be bypass

This commit is contained in:
Qstick 2017-12-13 21:46:44 -05:00
parent 4525f99370
commit 2ccc5af8d0
6 changed files with 116 additions and 37 deletions

View file

@ -1,4 +1,4 @@
using System;
using System;
using Nancy;
using Nancy.Bootstrapper;
using Lidarr.Http.Frontend;
@ -23,6 +23,8 @@ namespace Lidarr.Http.Extensions.Pipelines
private void Handle(NancyContext context)
{
if (context.Request.Method == "OPTIONS") return;
if (_cacheableSpecification.IsCacheable(context))
{
context.Response.Headers.EnableCache();
@ -33,4 +35,4 @@ namespace Lidarr.Http.Extensions.Pipelines
}
}
}
}
}