specter/mastodon
1
0
Fork 1
forked from fedi/mastodon
Code Pull requests Activity

Use same CORS policy for /@:username and /users/:username (#9485)

Browse source 
Fixes #8189

rack-cors being called before the application router, it does not follow
the redirection, and we need a separate rule for /users/:username.
This commit is contained in:
ThibG 2018-12-10 21:39:47 +01:00 committed by Eugen Rochko
parent ed24bb2c3e
commit 3f12c07ff5
1 changed files with 4 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
config/initializers/cors.rb
View file

@ -17,6 +17,10 @@ Rails.application.config.middleware.insert_before 0, Rack::Cors do
headers: :any, headers: :any,
methods: [:get], methods: [:get],
credentials: false credentials: false
resource '/users/:username',
headers: :any,
methods: [:get],
credentials: false
resource '/api/*', resource '/api/*',
headers: :any, headers: :any,
methods: [:post, :put, :delete, :get, :patch, :options], methods: [:post, :put, :delete, :get, :patch, :options],