Ignore faulty x-forwarded-proto.

Fixes mojodna#89.
stevage · Dec 18, 2019 · 24461a6 · 24461a6
1 parent ca87562
commit 24461a6
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/lib/app.js b/lib/app.js
@@ -256,7 +256,7 @@ module.exports = function(tilelive, options) {
           return next(err);
         }
 
-        var protocol = req.headers['x-forwarded-proto'] || req.protocol;
+        var protocol = req.headers['x-forwarded-proto'] && req.headers['x-forwarded-proto'].match(/^[a-z]+$/) || req.protocol;
         var host = req.headers['x-forwarded-host'] || req.headers.host;
         var uri = protocol + "://" + host +
           (path.dirname(req.originalUrl) +