administrator/frigate
1
0
Fork 0
mirror of https://github.com/blakeblackshear/frigate.git synced 2026-10-19 05:02:49 +03:00
Code Issues Actions 3 Packages Projects Releases Wiki Activity

strip the query before matching go2rtc paths in the origin check

Browse Source
This commit is contained in:
Josh Hawkins
2026-10-18 13:12:32 -05:00
parent 0fc0170461
commit 96fa39bbf7
1 changed files with 2 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
frigate/api/auth.py
+2 -3
View File
@@ -1300,9 +1300,8 @@ def _is_cross_origin_stream_request(original_url: str | None, request: Request)
# the internal port grants admin, so a browser on another site must be
# stopped before that early return
upgrade = request.headers.get("x-original-upgrade", "").lower()
if upgrade != "websocket" and not _is_go2rtc_stream_proxy_request(
original_url or "", request
):
path = split_request_uri(original_url or "")[0]
if upgrade != "websocket" and not _is_go2rtc_stream_proxy_request(path, request):
return False
return not origin_allowed(