mirrors/i2pd
2
0
Fork 0
mirror of https://github.com/PurpleI2P/i2pd synced 2024-11-10 00:00:29 +03:00
Code Issues Packages Projects Releases Wiki Activity

[http proxy] do not remove X-Requested-With for *HttpRequest (#1816)

Browse Source 
Signed-off-by: R4SAS <r4sas@i2pmail.org>
This commit is contained in:
R4SAS 2022-12-22 17:55:51 +00:00
parent b6f83dfe9f
commit 6376328c98
No known key found for this signature in database
GPG Key ID: 66F6C87B98EBCFE2
1 changed files with 12 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
libi2pd_client/HTTPProxy.cpp
View File

@ -252,7 +252,6 @@ namespace proxy {
req.RemoveHeader("From"); req.RemoveHeader("From");
req.RemoveHeader("Forwarded"); req.RemoveHeader("Forwarded");
req.RemoveHeader("DNT"); // Useless DoNotTrack flag req.RemoveHeader("DNT"); // Useless DoNotTrack flag
req.RemoveHeader("X-Requested-With"); // Android Webview send this with the value set to the application ID
req.RemoveHeader("Accept", "Accept-Encoding"); // Accept*, but Accept-Encoding req.RemoveHeader("Accept", "Accept-Encoding"); // Accept*, but Accept-Encoding
/* drop proxy-disclosing headers */ /* drop proxy-disclosing headers */
req.RemoveHeader("X-Forwarded"); req.RemoveHeader("X-Forwarded");
@ -260,6 +259,18 @@ namespace proxy {
/* replace headers */ /* replace headers */
req.UpdateHeader("User-Agent", "MYOB/6.66 (AN/ON)"); req.UpdateHeader("User-Agent", "MYOB/6.66 (AN/ON)");
/**
* i2pd PR #1816:
* Android Webview send this with the value set to the application ID, so we drop it,
* but only if it does not belong to an AJAX request (*HttpRequest, like XMLHttpRequest).
*/
if(req.GetHeader("X-Requested-With") != "") {
auto h = req.GetHeader ("X-Requested-With");
auto x = h.find("HttpRequest");
if (x == std::string::npos) // not found
req.RemoveHeader("X-Requested-With");
}
/** /**
* according to i2p ticket #1862: * according to i2p ticket #1862:
* leave Referer if requested URL with same schema, host and port, * leave Referer if requested URL with same schema, host and port,