guard against a typeError when httpSafeOrigin is not defined

5 years ago · 5196440e65
parent 2b3f6e3464
commit 5196440e65
1 changed files with 3 additions and 1 deletions
--- a/server.js
+++ b/server.js
@ -43,7 +43,9 @@ if (process.env.PACKAGE) {
    }

    config.httpUnsafeOrigin = config.httpUnsafeOrigin.trim();
-    config.httpSafeOrigin = config.httpSafeOrigin.trim().replace(/\/$/, '');
+    if (typeof(config.httpSafeOrigin) === 'string') {
+        config.httpSafeOrigin = config.httpSafeOrigin.trim().replace(/\/$/, '');
+    }

    // fall back to listening on a local address
    // if httpAddress is not a string