internal/server: lowercase the x-forwarded-proto header value

hashicorp · Sep 24, 2021 · c407788 · c407788
1 parent ca98037
commit c407788
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/internal/server/http_tls.go b/internal/server/http_tls.go
@@ -2,6 +2,7 @@ package server
 
 import (
  "net/http"
+ "strings"
 )
 
 // Proto header to read for the forwarded proto
@@ -13,7 +14,7 @@ func forceTLSHandler(h http.Handler) http.Handler {
  return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
  scheme := r.URL.Scheme
  if v := r.Header.Get(xForwardedProto); v != "" {
- scheme = v
+ scheme = strings.ToLower(v)
  }
 
  if scheme != "https" {