From 873cce27b8f1b7900ea08c85b2d563ddd478a38a Mon Sep 17 00:00:00 2001 From: "Dayan C. Galiazzi" Date: Tue, 24 Aug 2021 19:55:32 -0300 Subject: fix(ext/http): websocket upgrade header check (#11830) --- ext/http/01_http.js | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) (limited to 'ext/http') diff --git a/ext/http/01_http.js b/ext/http/01_http.js index b14a0d352..073cc7a7c 100644 --- a/ext/http/01_http.js +++ b/ext/http/01_http.js @@ -341,7 +341,8 @@ const _ws = Symbol("[[associated_ws]]"); function upgradeWebSocket(request, options = {}) { - if (request.headers.get("upgrade") !== "websocket") { + const upgrade = request.headers.get("upgrade"); + if (!upgrade || StringPrototypeToLowerCase(upgrade) !== "websocket") { throw new TypeError( "Invalid Header: 'upgrade' header must be 'websocket'", ); -- cgit v1.2.3