Handle empty Sec-Fetch-Mode

Simbiat · Jan 8, 2022 · 82120f8 · 82120f8
1 parent 4044858
commit 82120f8
Showing 1 changed file with 8 additions and 2 deletions.
diff --git a/src/HTTP20/Headers.php b/src/HTTP20/Headers.php
@@ -326,7 +326,10 @@ public function secFetch(array $site = [], array $mode = [], array $user = [], a
             #Check if support values are sent in headers
             if (
                 in_array($_SERVER['HTTP_SEC_FETCH_SITE'], self::fetchSite) &&
-                in_array($_SERVER['HTTP_SEC_FETCH_MODE'], self::fetchMode) &&
+                (
+                    empty($_SERVER['HTTP_SEC_FETCH_MODE']) ||
+                    in_array($_SERVER['HTTP_SEC_FETCH_MODE'], self::fetchMode)
+                ) &&
                 (
                     empty($_SERVER['HTTP_SEC_FETCH_USER']) ||
                     in_array($_SERVER['HTTP_SEC_FETCH_USER'], self::fetchUser)
@@ -370,7 +373,10 @@ public function secFetch(array $site = [], array $mode = [], array $user = [], a
                 #Actual validation
                 if (
                     !in_array($_SERVER['HTTP_SEC_FETCH_SITE'], $site) ||
-                    !in_array($_SERVER['HTTP_SEC_FETCH_MODE'], $mode) ||
+                    (
+                        !empty($_SERVER['HTTP_SEC_FETCH_MODE']) &&
+                        !in_array($_SERVER['HTTP_SEC_FETCH_MODE'], $mode)
+                    ) ||
                     (
                         !empty($_SERVER['HTTP_SEC_FETCH_USER']) &&
                         !in_array($_SERVER['HTTP_SEC_FETCH_USER'], $user)