paulmataruso/DumbDrop
1
0
Fork 0
mirror of https://github.com/DumbWareio/DumbDrop.git synced 2025-10-23 07:41:58 +00:00
Code Issues Packages Projects Releases Wiki Activity

Include BASE_URL as ALLOWED_ORIGIN by default

Browse Source
This commit is contained in:
abiteman
2025-06-19 22:24:09 -05:00
parent 6594628bfa
commit 489aa48bb2
1 changed files with 19 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

24
src/config/index.js
View File

@@ -126,16 +126,30 @@ const config = {
/**
* Allowed CORS origins (comma-separated, optional)
* Set via ALLOWED_ORIGINS in .env
* Defaults to localhost and 127.0.0.1 variants if not specified
* Defaults to localhost variants and BASE_URL origin if not specified
*/
allowedOrigins: process.env.ALLOWED_ORIGINS ?
process.env.ALLOWED_ORIGINS.split(',').map(origin => origin.trim()).filter(Boolean) :
[
allowedOrigins: (() => {
const defaultOrigins = [
'http://localhost:3000',
'http://127.0.0.1:3000',
'http://localhost:5050',
'http://127.0.0.1:5050'
],
];
// Extract origin from BASE_URL and add to defaults
try {
const baseUrlOrigin = new URL(process.env.BASE_URL || DEFAULT_BASE_URL).origin;
if (!defaultOrigins.includes(baseUrlOrigin)) {
defaultOrigins.push(baseUrlOrigin);
}
} catch (err) {
logConfig(`Failed to parse BASE_URL for CORS origin: ${err.message}`, 'warning');
}
return process.env.ALLOWED_ORIGINS ?
process.env.ALLOWED_ORIGINS.split(',').map(origin => origin.trim()).filter(Boolean) :
defaultOrigins;
})(),
allowedIframeOrigins: process.env.ALLOWED_IFRAME_ORIGINS
? process.env.ALLOWED_IFRAME_ORIGINS.split(',').map(origin => origin.trim()).filter(Boolean)