Enforce HTTPS for DNS SRV lookup
This commit is contained in:
@@ -66,7 +66,7 @@ class DnsLookupProvider extends RemoteIdentityServerProvider {
|
|||||||
|
|
||||||
for (SRVRecord record : records) {
|
for (SRVRecord record : records) {
|
||||||
log.info("Found SRV record: {}", record.toString())
|
log.info("Found SRV record: {}", record.toString())
|
||||||
String baseUrl = (record.getPort() != 80 ? "https://" : "http://") + record.getTarget().toString(true)
|
String baseUrl = "https://${record.getTarget().toString(true)}:${record.getPort()}"
|
||||||
Optional<?> answer = find(baseUrl, type, threePid)
|
Optional<?> answer = find(baseUrl, type, threePid)
|
||||||
if (answer.isPresent()) {
|
if (answer.isPresent()) {
|
||||||
return answer
|
return answer
|
||||||
|
|||||||
Reference in New Issue
Block a user