Skip to content

Only set access-control-allow-origin if the origin header value matches (or '*' is allowed) - #1091

Closed
heskew wants to merge 1 commit into
hapijs:masterfrom
Tagboard:cors-limit-resp
Closed

heskew wants to merge 1 commit into
hapijs:masterfrom
Tagboard:cors-limit-resp

Conversation

@heskew

@heskew heskew commented Oct 2, 2013

Copy link
Copy Markdown

I don't necessarily want to make known which origins are allowed for a private service. I could see allowing '*' to always be sent as a sign that this is a public service so this diff might not be the perfect (ish) solution.

@hueniverse hueniverse closed this Oct 26, 2013
@hueniverse

Copy link
Copy Markdown
Contributor

This is not the right solution given that it is a breaking change. However, I think I can accommodate the use case.

hueniverse pushed a commit that referenced this pull request Oct 26, 2013
@heskew

heskew commented Oct 27, 2013

Copy link
Copy Markdown
Author

Yep, for sure. I don't need the specific change, just the end result. Thanks!

Sent from my Windows Phone

-----Original Message-----
From: "Eran Hammer" notifications@github.com
Sent: ‎10/‎26/‎2013 4:26 PM
To: "spumko/hapi" hapi@noreply.github.com
Cc: "Nathan Heskew" heskew@gmail.com
Subject: Re: [hapi] Only set access-control-allow-origin if the origin headervalue matches (or '*' is allowed) (#1091)

This is not the right solution given that it is a breaking change. However, I think I can accommodate the use case.

Reply to this email directly or view it on GitHub.

jmonster pushed a commit to jmonster/hapi that referenced this pull request Feb 10, 2014
@lock lock Bot locked as resolved and limited conversation to collaborators Jan 10, 2020
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants