Nemcio/NodeBB
1
0
Fork 0
mirror of https://github.com/NodeBB/NodeBB.git synced 2025-12-23 17:00:24 +01:00
Code Issues Packages Projects Releases Wiki Activity

allow multiple origins for access-control-allow-origin header

Browse Source 
add access-control-allow-credentials header to acp
This commit is contained in:
Barış Soner Uşaklı
2018-03-20 12:24:55 -04:00
parent ae46ec0cae
commit ae0f1847ae
4 changed files with 74 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

13
src/middleware/headers.js
View File

@@ -14,7 +14,18 @@ module.exports = function (middleware) {
};
if (meta.config['access-control-allow-origin']) {
headers['Access-Control-Allow-Origin'] = encodeURI(meta.config['access-control-allow-origin']);
var origins = meta.config['access-control-allow-origin'].split(',');
origins = origins.map(function (origin) {
return origin && origin.trim();
});
if (origins.includes(req.get('origin'))) {
headers['Access-Control-Allow-Origin'] = encodeURI(req.get('origin'));
}
}
if (meta.config['access-control-allow-credentials']) {
headers['Access-Control-Allow-Credentials'] = meta.config['access-control-allow-credentials'];
}
if (process.env.NODE_ENV === 'development') {