Merge pull request #1 from willysoft/validate-allowports

fix: add validation for empty AllowPorts in local port filtering

Author: willysoft

src/LocalPortFiltering.AspNetCore/LocalPortFilteringMiddleware.cs

@@ -51,6 +51,8 @@ public Task Invoke(HttpContext context)
         if (exceptionHandler == null)
             return m_Next(context);
 
+        if (exceptionHandler.AllowPorts == null || exceptionHandler.AllowPorts.Count == 0)
+            return HostValidationFailed(context);
         if (!exceptionHandler.AllowPorts.Contains(context.Connection.LocalPort))
             return HostValidationFailed(context);
 

test/LocalPortFiltering.AspNetCore.Tests/LocalPortFilteringMiddlewareTests.cs

@@ -43,6 +43,7 @@ public async Task LocalPortFiltering_DefaultBehavior()
 
     [Theory]
     [InlineData(200, 443, new int[] { 443 })]
+    [InlineData(403, 443, new int[] { })]
     [InlineData(403, 80, new int[] { 443 })]
     [InlineData(200, 3000, new int[] { 3000, 3001 })]
     [InlineData(403, 4000, new int[] { 3000, 3001 })]