diff --git a/server.py b/server.py index ccb8fe81..4f8053fc 100644 --- a/server.py +++ b/server.py @@ -88,9 +88,10 @@ def create_origin_only_middleware(): origin = request.headers['Origin'] host_domain = host.lower() origin_domain = urllib.parse.urlparse(origin).netloc.lower() - if host_domain != origin_domain: - logging.warning("WARNING: request with non matching host and origin {} != {}, returning 403".format(host_domain, origin_domain)) - return web.Response(status=403) + if len(host_domain) > 0 and len(origin_domain) > 0: + if host_domain != origin_domain: + logging.warning("WARNING: request with non matching host and origin {} != {}, returning 403".format(host_domain, origin_domain)) + return web.Response(status=403) if request.method == "OPTIONS": response = web.Response()