SECURITY-9304: fix host with port in presigned url

Co-authored-by: Dora Kaszasne Sztanko <[email protected]>
emartech · Feb 29, 2024 · 146a44b · 146a44b
1 parent 36eb2a3
commit 146a44b
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/escherauth/escherauth.py b/escherauth/escherauth.py
@@ -284,7 +284,7 @@ def presign_url(self, url, expires):
         request = EscherRequest({
             'method': 'GET',
             'url': f'{parts.path}?{parts.query}',
-            'headers': [['host', parts.hostname]],
+            'headers': [['host', parts.netloc]],
         })
         request.set_presigned_url(True)
         signature = self.generate_signature(self.api_secret, request, ['host'], current_time)

diff --git a/test-cases b/test-cases