indymedia/epicyon
7
4 Fork 1
mirror of https://gitlab.com/bashrc2/epicyon synced 2026-11-03 03:02:13 +00:00
Code Issues 14 Releases Wiki Activity

Don't verify content length

Browse Source
This commit is contained in:
bashrc committed 2019-11-12 19:13:08 +00:00
1 parent ff09bf0181
commit 55194f95d5
1 file changed
-15
Download Patch File Download Diff File Expand all files Collapse all files
httpsig.py
-15
View File
@@ -173,9 +173,6 @@ def verifyPostHeaders(httpPrefix: str,publicKeyPem: str,headers: dict, \
# Unpack the signed headers and set values based on current headers and
# body (if a digest was included)
signedHeaderList = []
contentLength=len(messageBodyJsonStr)
if debug:
print('DEBUG: verifyPostHeaders contentLength='+str(contentLength))
for signedHeader in signatureDict['headers'].split(' '):
if debug:
print('DEBUG: verifyPostHeaders signedHeader='+signedHeader)
@@ -197,24 +194,12 @@ def verifyPostHeaders(httpPrefix: str,publicKeyPem: str,headers: dict, \
if headers.get('Content-Length'):
contentLengthStr='Content-Length'
if headers.get(contentLengthStr):
if int(headers[contentLengthStr])!=contentLength:
if debug:
print('DEBUG: verifyPostHeaders content-length does not match '+headers[contentLengthStr]+' != '+str(contentLength))
return False
if debug:
print('DEBUG: verifyPostHeaders adding '+contentLengthStr+' to signedHeaderList')
signedHeaderList.append(f'{contentLengthStr}: {headers[signedHeader]}')
else:
if debug:
print('DEBUG: verifyPostHeaders '+contentLengthStr+' not found in '+str(headers))
elif signedHeader == 'Content-Length':
if headers.get(signedHeader):
if int(headers[signedHeader])!=contentLength:
if debug:
print('DEBUG: verifyPostHeaders Content-Length does not match '+headers[signedHeader]+' != '+str(contentLength))
return False
if debug:
print('DEBUG: verifyPostHeaders adding Content-Length to signedHeaderList')
signedHeaderList.append(f'Content-Length: {headers[signedHeader]}')
else:
if debug: