Skip to content

Commit 642988a

Browse files
committed
fixup! fix(@angular/ssr): decode x-forwarded-prefix before validation
1 parent f100f2b commit 642988a

File tree

2 files changed

+3
-1
lines changed

2 files changed

+3
-1
lines changed

packages/angular/ssr/src/utils/validation.ts

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -284,7 +284,7 @@ function validateHeaders(request: Request): void {
284284
if (xForwardedPrefix) {
285285
let xForwardedPrefixDecoded: string;
286286
try {
287-
xForwardedPrefixDecoded = decodeURIComponent(xForwardedPrefix);
287+
xForwardedPrefixDecoded = decodeURIComponent(xForwardedPrefix).trim();
288288
} catch (e) {
289289
throw new Error(
290290
'Header "x-forwarded-prefix" contains an invalid value and cannot be decoded.',

packages/angular/ssr/test/utils/validation_spec.ts

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -197,6 +197,8 @@ describe('Validation Utils', () => {
197197
'/foo/..\\bar',
198198
'.',
199199
'..',
200+
'%2e',
201+
'%2e%2e/foo',
200202
];
201203

202204
for (const prefix of inputs) {

0 commit comments

Comments
 (0)