From eb7a71a64584c9d83be6a3c4a24efb39a202830a Mon Sep 17 00:00:00 2001
From: Kim Alvefur <zash@zash.se>
Date: Thu, 2 Jan 2020 10:49:37 +0100
Subject: mod_websocket: Clear mask bit when reflecting ping frames (fixes
 #1484)

---
 plugins/mod_websocket.lua | 1 +
 1 file changed, 1 insertion(+)

(limited to 'plugins/mod_websocket.lua')

diff --git a/plugins/mod_websocket.lua b/plugins/mod_websocket.lua
index 686a8981..6625c676 100644
--- a/plugins/mod_websocket.lua
+++ b/plugins/mod_websocket.lua
@@ -236,6 +236,7 @@ function handle_request(event)
 			return;
 		elseif opcode == 0x9 then -- Ping frame
 			frame.opcode = 0xA;
+			frame.MASK = false; -- Clients send masked frames, servers don't, see #1484
 			conn:write(build_frame(frame));
 			return "";
 		elseif opcode == 0xA then -- Pong frame, MAY be sent unsolicited, eg as keepalive
-- 
cgit v1.2.3