diff options
author | Chris <ccbrown112@gmail.com> | 2017-07-13 14:02:33 -0700 |
---|---|---|
committer | Christopher Speller <crspeller@gmail.com> | 2017-07-13 14:02:33 -0700 |
commit | 5c3c909c8541f26ae09577338d2302bed2a2f3a9 (patch) | |
tree | a6939d5db3dd8e2da3b2b4c971ef5d504832043f /app | |
parent | a1f17c1f8482f3c38e17cabe2365c76a1a2f32d4 (diff) | |
download | chat-5c3c909c8541f26ae09577338d2302bed2a2f3a9.tar.gz chat-5c3c909c8541f26ae09577338d2302bed2a2f3a9.tar.bz2 chat-5c3c909c8541f26ae09577338d2302bed2a2f3a9.zip |
Tweak WebSocket header-processing (#6929)
* fix
* consolidate code
Diffstat (limited to 'app')
-rw-r--r-- | app/server.go | 5 |
1 files changed, 2 insertions, 3 deletions
diff --git a/app/server.go b/app/server.go index a5090a597..a5b2dbda9 100644 --- a/app/server.go +++ b/app/server.go @@ -53,9 +53,8 @@ type CorsWrapper struct { func (cw *CorsWrapper) ServeHTTP(w http.ResponseWriter, r *http.Request) { if len(*utils.Cfg.ServiceSettings.AllowCorsFrom) > 0 { - origin := r.Header.Get("Origin") - if *utils.Cfg.ServiceSettings.AllowCorsFrom == "*" || strings.Contains(*utils.Cfg.ServiceSettings.AllowCorsFrom, origin) { - w.Header().Set("Access-Control-Allow-Origin", origin) + if utils.OriginChecker(r) { + w.Header().Set("Access-Control-Allow-Origin", r.Header.Get("Origin")) if r.Method == "OPTIONS" { w.Header().Set( |