DevModeHandler.java (vaadin-flow-4.0.5) | : | DevModeHandler.java (vaadin-flow-4.0.6) | ||
---|---|---|---|---|
skipping to change at line 313 | skipping to change at line 313 | |||
public boolean serveDevModeRequest(HttpServletRequest request, | public boolean serveDevModeRequest(HttpServletRequest request, | |||
HttpServletResponse response) throws IOException { | HttpServletResponse response) throws IOException { | |||
// Do not serve requests if dev server starting or failed to start. | // Do not serve requests if dev server starting or failed to start. | |||
if (isDevServerFailedToStart.get() || !devServerStartFuture.isDone()) { | if (isDevServerFailedToStart.get() || !devServerStartFuture.isDone()) { | |||
return false; | return false; | |||
} | } | |||
// Since we have 'publicPath=/VAADIN/' in webpack config, | // Since we have 'publicPath=/VAADIN/' in webpack config, | |||
// a valid request for webpack-dev-server should start with '/VAADIN/' | // a valid request for webpack-dev-server should start with '/VAADIN/' | |||
String requestFilename = request.getPathInfo(); | String requestFilename = request.getPathInfo(); | |||
if (HandlerHelper.isPathUnsafe(requestFilename)) { | ||||
getLogger().info(HandlerHelper.UNSAFE_PATH_ERROR_MESSAGE_PATTERN, | ||||
requestFilename); | ||||
response.setStatus(HttpServletResponse.SC_FORBIDDEN); | ||||
return true; | ||||
} | ||||
HttpURLConnection connection = prepareConnection(requestFilename, | HttpURLConnection connection = prepareConnection(requestFilename, | |||
request.getMethod()); | request.getMethod()); | |||
// Copies all the headers from the original request | // Copies all the headers from the original request | |||
Enumeration<String> headerNames = request.getHeaderNames(); | Enumeration<String> headerNames = request.getHeaderNames(); | |||
while (headerNames.hasMoreElements()) { | while (headerNames.hasMoreElements()) { | |||
String header = headerNames.nextElement(); | String header = headerNames.nextElement(); | |||
connection.setRequestProperty(header, | connection.setRequestProperty(header, | |||
// Exclude keep-alive | // Exclude keep-alive | |||
"Connect".equals(header) ? "close" | "Connect".equals(header) ? "close" | |||
End of changes. 1 change blocks. | ||||
0 lines changed or deleted | 7 lines changed or added |