Add check for parsed accept header to not be blank

cloudfoundry · Feb 5, 2025 · c888b63 · c888b63
1 parent 271bf8c
commit c888b63
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/server/src/main/java/org/cloudfoundry/identity/uaa/security/web/UaaRequestMatcher.java b/server/src/main/java/org/cloudfoundry/identity/uaa/security/web/UaaRequestMatcher.java
@@ -143,6 +143,10 @@ private boolean matchesAcceptHeader(String requestValue, List<String> expectedVa
         }
 
         List<MediaType> requestValues = MediaType.parseMediaTypes(requestValue);
+        if (requestValues.isEmpty()) {
+            // the "Accept" header is set, but blank -> cannot match any expected value
+            return false;
+        }
         for (String expectedValue : expectedValues) {
             if (MediaType.parseMediaType(expectedValue).includes(requestValues.get(0))) {
                 return true;