Merge pull request #569 from nextcloud/backport/568/stable31

kyteinsky · web-flow · commit 47faca844368 · 2025-04-22T20:31:30.000+05:30
[stable31] feat: lowercase headers to exclude in exapp proxy
diff --git a/lib/Controller/ExAppProxyController.php b/lib/Controller/ExAppProxyController.php
@@ -321,6 +321,8 @@ private function passesExAppProxyRouteAccessLevelCheck(int $accessLevel): bool {
 
 	private function buildHeadersWithExclude(array $route, array $headers): array {
 		$headersToExclude = json_decode($route['headers_to_exclude'], true);
+		$headersToExclude = array_map('strtolower', $headersToExclude);
+
 		if (!in_array('x-origin-ip', $headersToExclude)) {
 			$headersToExclude[] = 'x-origin-ip';
 		}

Original file line number	Diff line number	Diff line change
`@@ -321,6 +321,8 @@ private function passesExAppProxyRouteAccessLevelCheck(int $accessLevel): bool {`
`321`	`321`
`322`	`322`	`private function buildHeadersWithExclude(array $route, array $headers): array {`
`323`	`323`	`$headersToExclude = json_decode($route['headers_to_exclude'], true);`
	`324`	`+ $headersToExclude = array_map('strtolower', $headersToExclude);`
	`325`	`+`
`324`	`326`	`if (!in_array('x-origin-ip', $headersToExclude)) {`
`325`	`327`	`$headersToExclude[] = 'x-origin-ip';`
`326`	`328`	`}`