github-mirror/discourse
2
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2024-12-05 08:30:12 +08:00
Code Issues Actions 1 Packages Projects Releases Wiki Activity

SECURITY: extra CORS headers should be set on correct host

Browse Source
This commit is contained in:
Sam 2018-07-11 09:29:02 +10:00
parent 6f25421a06
commit 297b899c68
1 changed files with 6 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
config/initializers/004-message_bus.rb
View File

@ -10,14 +10,14 @@ end
def setup_message_bus_env(env)
return if env["__mb"]
extra_headers = {
"Access-Control-Allow-Origin" => Discourse.base_url_no_prefix,
"Access-Control-Allow-Methods" => "GET, POST",
"Access-Control-Allow-Headers" => "X-SILENCE-LOGGER, X-Shared-Session-Key, Dont-Chunk, Discourse-Visible"
}
host = RailsMultisite::ConnectionManagement.host(env)
RailsMultisite::ConnectionManagement.with_hostname(host) do
extra_headers = {
"Access-Control-Allow-Origin" => Discourse.base_url_no_prefix,
"Access-Control-Allow-Methods" => "GET, POST",
"Access-Control-Allow-Headers" => "X-SILENCE-LOGGER, X-Shared-Session-Key, Dont-Chunk, Discourse-Visible"
}
user = nil
begin
user = CurrentUser.lookup_from_env(env)