Daniel García
1 month ago
committed by
GitHub
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with
2 additions and
0 deletions
-
src/util.rs
|
|
|
@ -153,9 +153,11 @@ impl Cors { |
|
|
|
fn get_allowed_origin(headers: &HeaderMap<'_>) -> Option<String> { |
|
|
|
let origin = Cors::get_header(headers, "Origin"); |
|
|
|
let safari_extension_origin = "file://"; |
|
|
|
let desktop_custom_file_origin = "bw-desktop-file://bundle"; |
|
|
|
|
|
|
|
if origin == CONFIG.domain_origin() |
|
|
|
|| origin == safari_extension_origin |
|
|
|
|| origin == desktop_custom_file_origin |
|
|
|
|| (CONFIG.sso_enabled() && origin == CONFIG.sso_authority()) |
|
|
|
{ |
|
|
|
Some(origin) |
|
|
|
|
