summaryrefslogtreecommitdiffstats
path: root/app/server.go
diff options
context:
space:
mode:
authorChris <ccbrown112@gmail.com>2017-07-13 14:02:33 -0700
committerChristopher Speller <crspeller@gmail.com>2017-07-13 14:02:33 -0700
commit5c3c909c8541f26ae09577338d2302bed2a2f3a9 (patch)
treea6939d5db3dd8e2da3b2b4c971ef5d504832043f /app/server.go
parenta1f17c1f8482f3c38e17cabe2365c76a1a2f32d4 (diff)
downloadchat-5c3c909c8541f26ae09577338d2302bed2a2f3a9.tar.gz
chat-5c3c909c8541f26ae09577338d2302bed2a2f3a9.tar.bz2
chat-5c3c909c8541f26ae09577338d2302bed2a2f3a9.zip
Tweak WebSocket header-processing (#6929)
* fix * consolidate code
Diffstat (limited to 'app/server.go')
-rw-r--r--app/server.go5
1 files changed, 2 insertions, 3 deletions
diff --git a/app/server.go b/app/server.go
index a5090a597..a5b2dbda9 100644
--- a/app/server.go
+++ b/app/server.go
@@ -53,9 +53,8 @@ type CorsWrapper struct {
func (cw *CorsWrapper) ServeHTTP(w http.ResponseWriter, r *http.Request) {
if len(*utils.Cfg.ServiceSettings.AllowCorsFrom) > 0 {
- origin := r.Header.Get("Origin")
- if *utils.Cfg.ServiceSettings.AllowCorsFrom == "*" || strings.Contains(*utils.Cfg.ServiceSettings.AllowCorsFrom, origin) {
- w.Header().Set("Access-Control-Allow-Origin", origin)
+ if utils.OriginChecker(r) {
+ w.Header().Set("Access-Control-Allow-Origin", r.Header.Get("Origin"))
if r.Method == "OPTIONS" {
w.Header().Set(