Send 400 Bad Request if a WebSocket client doesn't send an origin.

diff --git a/src/modules/m_websocket.cpp b/src/modules/m_websocket.cpp
index da8bd382b8d50569ec4457ac42bd17902dbeb33b..c7b7f6d4fa537695c5d55848b2b97bbff80e533c 100644 (file)
--- a/src/modules/m_websocket.cpp
+++ b/src/modules/m_websocket.cpp
@@ -340,6 +340,11 @@ class WebSocketHook : public IOHookMiddle
                                }
                        }
                }
+               else
+               {
+                       FailHandshake(sock, "HTTP/1.1 400 Bad Request\r\nConnection: close\r\n\r\n", "WebSocket: Received HTTP request that did not send the Origin header");
+                       return -1;
+               }
 
                if (!allowedorigin)
                {