Nemcio/NodeBB
1
0
Fork 0
mirror of https://github.com/NodeBB/NodeBB.git synced 2025-12-24 01:10:31 +01:00
Code Issues Packages Projects Releases Wiki Activity

fix headers for new installs

Browse Source 
encodeURI(undefined) === "undefined"
This commit is contained in:
barisusakli
2016-11-23 21:06:02 +03:00
parent 12d46ca441
commit 6beacdb80c
1 changed files with 6 additions and 17 deletions
Download Patch File Download Diff File Expand all files Collapse all files

23
src/middleware/headers.js
View File

@@ -1,31 +1,20 @@
'use strict';
var _ = require('underscore');
var meta = require('../meta');
module.exports = function (middleware) {
middleware.addHeaders = function (req, res, next) {
var defaults = {
'X-Powered-By': 'NodeBB',
'X-Frame-Options': 'SAMEORIGIN',
'Access-Control-Allow-Origin': 'null' // yes, string null.
};
var headers = {
'X-Powered-By': encodeURI(meta.config['powered-by']),
'X-Frame-Options': meta.config['allow-from-uri'] ? 'ALLOW-FROM ' + encodeURI(meta.config['allow-from-uri']) : undefined,
'Access-Control-Allow-Origin': encodeURI(meta.config['access-control-allow-origin']),
'Access-Control-Allow-Methods': encodeURI(meta.config['access-control-allow-methods']),
'Access-Control-Allow-Headers': encodeURI(meta.config['access-control-allow-headers'])
'X-Powered-By': encodeURI(meta.config['powered-by'] || 'NodeBB'),
'X-Frame-Options': meta.config['allow-from-uri'] ? 'ALLOW-FROM ' + encodeURI(meta.config['allow-from-uri']) : 'SAMEORIGIN',
'Access-Control-Allow-Origin': encodeURI(meta.config['access-control-allow-origin'] || 'null'),
'Access-Control-Allow-Methods': encodeURI(meta.config['access-control-allow-methods'] || ''),
'Access-Control-Allow-Headers': encodeURI(meta.config['access-control-allow-headers'] || '')
};
_.defaults(headers, defaults);
headers = _.pick(headers, Boolean); // Remove falsy headers
for (var key in headers) {
if (headers.hasOwnProperty(key)) {
if (headers.hasOwnProperty(key) && headers[key]) {
res.setHeader(key, headers[key]);
}
}