Fix for Excessive header checker when excluding Cloudflare

Nuklon · Oct 4, 2021 · 9abd071 · 9abd071
1 parent e416f06
commit 9abd071
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/Umbraco.Core/HealthChecks/Checks/Security/ExcessiveHeadersCheck.cs b/src/Umbraco.Core/HealthChecks/Checks/Security/ExcessiveHeadersCheck.cs
@@ -65,7 +65,7 @@ private async Task<HealthCheckStatus> CheckForHeaders()
                 var headersToCheckFor = new List<string> {"Server", "X-Powered-By", "X-AspNet-Version", "X-AspNetMvc-Version" };
 
                 // Ignore if server header is present and it's set to cloudflare
-                if (allHeaders.InvariantContains("Server") && response.Headers.TryGetValues("Server", out var serverHeaders) && serverHeaders.ToString().InvariantEquals("cloudflare"))
+                if (allHeaders.InvariantContains("Server") && response.Headers.TryGetValues("Server", out var serverHeaders) && serverHeaders.FirstOrDefault().InvariantEquals("cloudflare"))
                 {
                     headersToCheckFor.Remove("Server");
                 }