diff options
Diffstat (limited to 'src')
| -rw-r--r-- | src/local/pager.nim | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/src/local/pager.nim b/src/local/pager.nim index 00291e87..b8d8661e 100644 --- a/src/local/pager.nim +++ b/src/local/pager.nim @@ -1863,8 +1863,8 @@ proc handleEvent0(pager: Pager; container: Container; event: ContainerEvent): let url = event.request.url let sameScheme = container.url.scheme == url.scheme if event.request.httpMethod != hmGet and not sameScheme and - container.url.scheme notin ["http", "https"] and - url.scheme notin ["http", "https"]: + not (container.url.scheme in ["http", "https"] and + url.scheme in ["http", "https"]): pager.alert("Blocked cross-scheme POST: " & $url) return #TODO this is horrible UX, async actions shouldn't block input |