svrjs/modsecurity-integration
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix: fix request headers added as response headers

Browse source
This commit is contained in:
Dorian Niemiec 2025-01-22 09:56:39 +01:00
parent 325781566c
commit 95cb12a9f3
1 changed files with 2 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
src/index.js
View file

@ -424,14 +424,14 @@ module.exports = (req, res, logFacilities, config, next) => {
let headerIntervene = false;
Object.keys(req.headers).every((key) => {
if (typeof req.headers[key] == "string") {
securityResponse = transaction.addResponseHeader(key, req.headers[key]);
securityResponse = transaction.addRequestHeader(key, req.headers[key]);
if (typeof securityResponse === "object") {
headerIntervene = true;
return false;
}
} else if (Array.isArray(req.headers[key])) {
req.headers[key].every((value) => {
securityResponse = transaction.addResponseHeader(key, value);
securityResponse = transaction.addRequestHeader(key, value);
if (typeof securityResponse === "object") {
headerIntervene = true;
return false;