Nemcio/NodeBB
1
0
Fork 0
mirror of https://github.com/NodeBB/NodeBB.git synced 2025-12-24 01:10:31 +01:00
Code Issues Packages Projects Releases Wiki Activity

fixes #5230

Browse Source
This commit is contained in:
Julian Lam
2016-11-23 12:25:01 -05:00
parent c5237443cd
commit b7fa8c1db1
1 changed files with 6 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
src/middleware/headers.js
View File

@@ -14,11 +14,11 @@ module.exports = function (middleware) {
'Access-Control-Allow-Origin': 'null' // yes, string null. 'Access-Control-Allow-Origin': 'null' // yes, string null.
}; };
var headers = { var headers = {
'X-Powered-By': meta.config['powered-by'], 'X-Powered-By': encodeURI(meta.config['powered-by']),
'X-Frame-Options': meta.config['allow-from-uri'] ? 'ALLOW-FROM ' + meta.config['allow-from-uri'] : undefined, 'X-Frame-Options': meta.config['allow-from-uri'] ? 'ALLOW-FROM ' + encodeURI(meta.config['allow-from-uri']) : undefined,
'Access-Control-Allow-Origin': meta.config['access-control-allow-origin'], 'Access-Control-Allow-Origin': encodeURI(meta.config['access-control-allow-origin']),
'Access-Control-Allow-Methods': meta.config['access-control-allow-methods'], 'Access-Control-Allow-Methods': encodeURI(meta.config['access-control-allow-methods']),
'Access-Control-Allow-Headers': meta.config['access-control-allow-headers'] 'Access-Control-Allow-Headers': encodeURI(meta.config['access-control-allow-headers'])
}; };
_.defaults(headers, defaults); _.defaults(headers, defaults);
@@ -26,7 +26,7 @@ module.exports = function (middleware) {
for (var key in headers) { for (var key in headers) {
if (headers.hasOwnProperty(key)) { if (headers.hasOwnProperty(key)) {
res.setHeader(key, encodeURI(headers[key])); res.setHeader(key, headers[key]);
} }
} }