From cc3c5932e613cc5806b0e4fc3a20a8c92c7865ca Mon Sep 17 00:00:00 2001
From: "cls%seawood.org" <cls%seawood.org@18797224-902f-48f8-a5cc-f745e15eee43>
Date: Tue, 16 May 2006 05:23:22 +0000
Subject: [PATCH] Check SERVER_PORT when validating referers Bug #284372
 r=timeless

git-svn-id: svn://10.0.0.236/trunk@196646 18797224-902f-48f8-a5cc-f745e15eee43
---
 mozilla/webtools/bonsai/globals.pl | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/mozilla/webtools/bonsai/globals.pl b/mozilla/webtools/bonsai/globals.pl
index 9661f06fc6a..d00911d2763 100644
--- a/mozilla/webtools/bonsai/globals.pl
+++ b/mozilla/webtools/bonsai/globals.pl
@@ -1063,12 +1063,12 @@ sub validateReferer {
     my (@scripts) = @_;
     my $script;
     my $found = 0;
-    my $script_path = dirname("$ENV{'SERVER_NAME'}$ENV{'SCRIPT_NAME'}");
+    my $script_path = dirname($ENV{'SCRIPT_NAME'});
     my $referer = $ENV{'HTTP_REFERER'} || "";
 
     foreach $script (@scripts) {
         $found++ if
-            ($referer =~ m@^http(s)?://(\w+(:\w+)?\@)?$script_path/$script(\?|$)@i);
+            ($referer =~ m@^http(s)?://(\w+(:\w+)?\@)?$ENV{'SERVER_NAME'}(:$ENV{'SERVER_PORT'})?$script_path/$script(\?|$)@i);
     }
     die "This script cannot be called directly.\n" if (!$found);
 }