Allow star CORS

If the user sets "*" as a CORS origin, allow everything.

Signed-off-by: Gabriel Adrian Samfira <gsamfira@cloudbasesolutions.com>
This commit is contained in:
Gabriel Adrian Samfira 2025-09-25 13:35:47 +00:00 committed by Gabriel
parent 545f042f4d
commit 56618473d1

View file

@ -58,6 +58,10 @@ func NewAPIController(r *runner.Runner, authenticator *auth.Authenticator, hub *
return false
}
for _, val := range apiCfg.CORSOrigins {
if val == "*" {
// user has a setting that allows everything
return true
}
corsVal, err := url.Parse(val)
if err != nil {
continue