yujunjun/strapi
1
0
Fork 0
mirror of https://github.com/strapi/strapi.git synced 2025-08-07 08:16:35 +00:00
Code Issues Packages Projects Releases Wiki Activity

Change split for REGEX and return * when in array exist

Browse Source
This commit is contained in:
almera 2018-12-17 15:13:38 -05:00
parent be585f6e17
commit d31447ad93
1 changed files with 4 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
packages/strapi/lib/middlewares/cors/index.js
View File

@ -32,8 +32,11 @@ module.exports = strapi => {
} else if (strapi.config.currentEnvironment.security.cors.enabled) {
return strapi.koaMiddlewares.kcors({
origin: function(ctx) {
const whitelist = strapi.config.middleware.settings.cors.origin.split(',');
const whitelist = strapi.config.middleware.settings.cors.origin.split(/\s*,\s*/);
const requestOrigin = ctx.accept.headers.origin;
if(whitelist.includes('*'){
return '*';
}
if (!whitelist.includes(requestOrigin)) {
return ctx.throw(`${requestOrigin} is not a valid origin`);
}