@@ -89,7 +89,7 @@ func New(config ...Config) fiber.Handler {
89
89
err := originMatchesHost (c , cfg .TrustedOrigins )
90
90
91
91
// If there's no origin, enforce a referer check for HTTPS connections.
92
- if err == errNoOrigin {
92
+ if errors . Is ( err , errNoOrigin ) {
93
93
if c .Scheme () == "https" {
94
94
err = refererMatchesHost (c , cfg .TrustedOrigins )
95
95
} else {
@@ -260,7 +260,7 @@ func isFromCookie(extractor any) bool {
260
260
// originMatchesHost checks that the origin header matches the host header
261
261
// returns an error if the origin header is not present or is invalid
262
262
// returns nil if the origin header is valid
263
- func originMatchesHost (c fiber.Ctx , TrustedOrigins []string ) error {
263
+ func originMatchesHost (c fiber.Ctx , trustedOrigins []string ) error {
264
264
origin := c .Get (fiber .HeaderOrigin )
265
265
if origin == "" {
266
266
return errNoOrigin
@@ -272,7 +272,7 @@ func originMatchesHost(c fiber.Ctx, TrustedOrigins []string) error {
272
272
}
273
273
274
274
if originURL .Host != c .Host () {
275
- for _ , trustedOrigin := range TrustedOrigins {
275
+ for _ , trustedOrigin := range trustedOrigins {
276
276
if isSameSchemeAndDomain (trustedOrigin , origin ) {
277
277
return nil
278
278
}
@@ -286,7 +286,7 @@ func originMatchesHost(c fiber.Ctx, TrustedOrigins []string) error {
286
286
// refererMatchesHost checks that the referer header matches the host header
287
287
// returns an error if the referer header is not present or is invalid
288
288
// returns nil if the referer header is valid
289
- func refererMatchesHost (c fiber.Ctx , TrustedOrigins []string ) error {
289
+ func refererMatchesHost (c fiber.Ctx , trustedOrigins []string ) error {
290
290
referer := c .Get (fiber .HeaderReferer )
291
291
if referer == "" {
292
292
return ErrNoReferer
@@ -298,7 +298,7 @@ func refererMatchesHost(c fiber.Ctx, TrustedOrigins []string) error {
298
298
}
299
299
300
300
if refererURL .Host != c .Host () {
301
- for _ , trustedOrigin := range TrustedOrigins {
301
+ for _ , trustedOrigin := range trustedOrigins {
302
302
if isSameSchemeAndDomain (trustedOrigin , referer ) {
303
303
return nil
304
304
}
0 commit comments