Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix(gateway): include CORS on subdomain redirects #9994

Merged
merged 2 commits into from
Jun 27, 2023

Conversation

lidel
Copy link
Member

@lidel lidel commented Jun 26, 2023

This PR closes #9983 which is regression since 0.20.
We should include this fix in Kubo 0.21 (#9814).

Depends on ipfs/boxo#395

@lidel lidel force-pushed the fix/http-options-on-subdomains branch 2 times, most recently from 6258061 to b04e2f8 Compare June 26, 2023 22:57
@lidel lidel marked this pull request as ready for review June 26, 2023 23:15
@lidel lidel requested a review from a team as a code owner June 26, 2023 23:15
@hacdias hacdias force-pushed the fix/http-options-on-subdomains branch from b04e2f8 to fe9b641 Compare June 27, 2023 11:03
@hacdias hacdias enabled auto-merge (squash) June 27, 2023 11:04
@hacdias hacdias merged commit 3da4e5b into master Jun 27, 2023
@hacdias hacdias deleted the fix/http-options-on-subdomains branch June 27, 2023 11:14
hacdias pushed a commit that referenced this pull request Jun 29, 2023
Comment on lines -70 to -74
HTTPHeaders: map[string][]string{
"Access-Control-Allow-Origin": {"*"},
"Access-Control-Allow-Methods": {"GET"},
"Access-Control-Allow-Headers": {"X-Requested-With", "Range", "User-Agent"},
},
Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

ℹ️ These are legacy values that were hardcoded since years ago, but no longer necessary. AddAccessControlHeaders from boxo/gateway ensures safe defaults are added if user did not pass own, and these values are already there, so we can remove them from config – they were not used/redundant for a while, even before we moved gateway code to boxo.

No need to write migration, as this is subset of what boxo/gateway sets anyway + we have tests in this PR that confirm these headers are will present even when missing from config.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

webui: CORS issue on Peers page breaks geoip
2 participants