security: Use quoted values for origin, URL, and force quoting.

This commit is contained in:
jamesread
2022-04-05 12:19:24 +01:00
parent 76971603b4
commit ebd1c4e938
3 changed files with 8 additions and 3 deletions
+2 -2
View File
@@ -32,12 +32,12 @@ func StartSingleHTTPFrontend(cfg *config.Config) {
mux := http.NewServeMux()
mux.HandleFunc("/api/", func(w http.ResponseWriter, r *http.Request) {
log.Debugf("api req: %v", r.URL)
log.Debugf("api req: %q", r.URL)
apiProxy.ServeHTTP(w, r)
})
mux.HandleFunc("/", func(w http.ResponseWriter, r *http.Request) {
log.Debugf("ui req: %v", r.URL)
log.Debugf("ui req: %q", r.URL)
webuiProxy.ServeHTTP(w, r)
})