Ignore port when verifying origin

Author: stevenrombauts

src/EventListener/OriginListener.php

@@ -51,14 +51,15 @@ public function onRequest(RequestEvent $event): void
         }
 
         // valid origin
-        $origin = $event->getRequest()->headers->get('Origin');
+        $origin = $event->getRequest()->headers->get('Origin') ?? '';
         if ($origin === 'https://'.$this->packagistHost) {
             return;
         }
 
         // valid as well with HTTP in dev
-        $parts = parse_url($origin);
-        $knownOrigin = $parts['scheme'].'://'.$parts['host'];
+        $scheme = parse_url($origin, PHP_URL_SCHEME);
+        $port = parse_url($origin, PHP_URL_PORT);
+        $knownOrigin = $scheme.'://'.$port;
         if ('dev' === $this->environment && $knownOrigin === 'http://'.$this->packagistHost) {
             return;
         }