diff options
author | Florian Zeitz <florob@babelmonkeys.de> | 2014-09-05 02:14:04 +0200 |
---|---|---|
committer | Florian Zeitz <florob@babelmonkeys.de> | 2014-09-05 02:14:04 +0200 |
commit | 0b99f62ea55ba5b07293a110d693c2b4a88fa8fb (patch) | |
tree | 96a27eb8331e075e6a36f8d309a8e63d0881452a | |
parent | 143508d67561dbf75f7edd3a6576722f4c56c087 (diff) | |
download | prosody-0b99f62ea55ba5b07293a110d693c2b4a88fa8fb.tar.gz prosody-0b99f62ea55ba5b07293a110d693c2b4a88fa8fb.zip |
Check Sec-WebSocket-Protocol header
-rw-r--r-- | net/websocket.lua | 15 |
1 files changed, 10 insertions, 5 deletions
diff --git a/net/websocket.lua b/net/websocket.lua index db65caa4..3c4746b7 100644 --- a/net/websocket.lua +++ b/net/websocket.lua @@ -6,6 +6,8 @@ -- COPYING file in the source package for more information. -- +local t_concat = table.concat; + local http = require "net.http"; local frames = require "net.websocket.frames"; local base64 = require "util.encodings".base64; @@ -76,7 +78,7 @@ function websocket_listeners.onincoming(handler, buffer, err) if frame.FIN then s.databuffer = nil; if s.onmessage then - s:onmessage(table.concat(databuffer), databuffer.type); + s:onmessage(t_concat(databuffer), databuffer.type); end end else -- Control frame @@ -187,15 +189,18 @@ local function connect(url, ex, listeners) -- Either a single protocol string or an array of protocol strings. local protocol = ex.protocol; - if type(protocol) == "table" then - protocol = table.concat(protocol, ", "); + if type(protocol) == "string" then + protocol = { protocol }; + end + for _, v in ipairs(protocol) do + protocol[v] = true; end local headers = { ["Upgrade"] = "websocket"; ["Connection"] = "Upgrade"; ["Sec-WebSocket-Key"] = key; - ["Sec-WebSocket-Protocol"] = protocol; + ["Sec-WebSocket-Protocol"] = t_concat(protocol, ", "); ["Sec-WebSocket-Version"] = "13"; ["Sec-WebSocket-Extensions"] = ex.extensions; } @@ -233,7 +238,7 @@ local function connect(url, ex, listeners) or r.headers["connection"]:lower() ~= "upgrade" or r.headers["upgrade"] ~= "websocket" or r.headers["sec-websocket-accept"] ~= base64.encode(sha1(key .. "258EAFA5-E914-47DA-95CA-C5AB0DC85B11")) - -- TODO: check "Sec-WebSocket-Protocol" + or not protocol[r.headers["sec-websocket-protocol"]] then s.readyState = 3; log("warn", "WebSocket connection to %s failed: %s", url, tostring(b)); |