[Libreoffice-commits] online.git: wsd/FileServer.cpp

[Libreoffice Gerrit user]

 wsd/FileServer.cpp |    3 +++
 1 file changed, 3 insertions(+)

New commits:
commit 8f1abe48397d7da4629fb50324289ad39102cfc7
Author:     Samuel Mehrbrodt <Samuel.Mehrbrodt at cib.de>
AuthorDate: Wed Nov 28 09:36:24 2018 +0100
Commit:     Samuel Mehrbrodt <Samuel.Mehrbrodt at cib.de>
CommitDate: Wed Nov 28 09:53:35 2018 +0100

    Only add the host to frame-ancestors
    
    not the whole URL with all parameters
    
    Change-Id: I42e3a6a4c05410284afea51bb13ac3f692b243ef
    Reviewed-on: https://gerrit.libreoffice.org/64147
    Reviewed-by: Samuel Mehrbrodt <Samuel.Mehrbrodt at cib.de>
    Tested-by: Samuel Mehrbrodt <Samuel.Mehrbrodt at cib.de>

diff --git a/wsd/FileServer.cpp b/wsd/FileServer.cpp
index 651654364..87f90e556 100644
--- a/wsd/FileServer.cpp
+++ b/wsd/FileServer.cpp
@@ -694,6 +694,9 @@ void FileServerRequestHandler::preprocessFile(const HTTPRequest& request, Poco::
         {
             std::string wopiFrameAncestor;
             Poco::URI::decode(param.second, wopiFrameAncestor);
+            Poco::URI uriWopiFrameAncestor(wopiFrameAncestor);
+            // Remove parameters from URL
+            wopiFrameAncestor = uriWopiFrameAncestor.getHost();
             if (wopiFrameAncestor != uriHost.getHost() && wopiFrameAncestor != configFrameAncestor)
             {
                 frameAncestors += " " + wopiFrameAncestor;