Skip to content
This repository has been archived by the owner on Feb 12, 2024. It is now read-only.

fix: reject requests when cors origin list is empty #3674

Merged
merged 3 commits into from
May 7, 2021
Merged

fix: reject requests when cors origin list is empty #3674

merged 3 commits into from
May 7, 2021

Commits on May 6, 2021

  1. fix: reject requests when cors origin list is empty 

    If CORS origin list is empty, Hapi throws an error as it considers
that to be invalid configuration.

We want to reject requests that send and origin or a referrer when
no allowed origins have been configured, so when these headers are
sent, reject the request if no allowed origins are present in the
config.
    @achingbrain
    achingbrain committed May 6, 2021
    Configuration menu
    Copy the full SHA
    6e52add View commit details
    Browse the repository at this point in the history

Commits on May 7, 2021

  1. chore: apply suggestions from code review 

    Co-authored-by: Vasco Santos <vasco.santos@moxy.studio>
Co-authored-by: Marcin Rataj <lidel@lidel.org>
    @achingbrain @vasco-santos @lidel
    3 people authored May 7, 2021
    Configuration menu
    Copy the full SHA
    38e62ec View commit details
    Browse the repository at this point in the history

  2. chore: add more tests

    @achingbrain
    achingbrain committed May 7, 2021
    Configuration menu
    Copy the full SHA
    a638891 View commit details
    Browse the repository at this point in the history