Skip to content
This repository has been archived by the owner on Feb 12, 2024. It is now read-only.

fix: reject requests when cors origin list is empty (#3674) #3676

Merged
merged 2 commits into from
May 7, 2021
Merged

fix: reject requests when cors origin list is empty (#3674) #3676

merged 2 commits into from
May 7, 2021

Commits on May 7, 2021

  1. fix: reject requests when cors origin list is empty (#3674) 

    If CORS origin list is empty, Hapi throws an error as it considers
that to be invalid configuration.

We want to reject requests that send and origin or a referer when
no allowed origins have been configured, so when these headers are
sent, reject the request if no allowed origins are present in the
config.

Co-authored-by: Vasco Santos <vasco.santos@moxy.studio>
Co-authored-by: Marcin Rataj <lidel@lidel.org>
    @achingbrain @vasco-santos @lidel
    3 people committed May 7, 2021
    Configuration menu
    Copy the full SHA
    a8d7ac4 View commit details
    Browse the repository at this point in the history

  2. chore: ts-ignore until #3655 lands

    @achingbrain
    achingbrain committed May 7, 2021
    Configuration menu
    Copy the full SHA
    ff3fab6 View commit details
    Browse the repository at this point in the history