lee/puter
1
0
Fork 0
mirror of https://github.com/HeyPuter/puter.git synced 2026-09-25 22:55:58 +00:00
Code Issues Actions 6 Packages Projects Releases Wiki Activity

dev: regex rules for undefined origin allowed
Docker Image CI / build-and-push-image (push) Has been cancelled
Details
Maintain Release Merge PR / update-release-pr (push) Has been cancelled
Details
release-please / release-please (push) Has been cancelled
Details
test / test (18.x) (push) Has been cancelled
Details
test / test (20.x) (push) Has been cancelled
Details
test / test (22.x) (push) Has been cancelled
Details

Browse Source 
This commit allows using a regex to specify a route that's allowed to
not have an "Origin" header specified. This is necessary for parametized
URLs.
This commit is contained in:
KernelDeimos
2025-06-16 18:16:18 -04:00
parent 24cae79291
commit 6315020cc0
1 changed files with 5 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/backend/src/modules/web/WebServerService.js
+5 -1
View File
@@ -518,7 +518,11 @@ class WebServerService extends BaseService {
}
// rules that don't apply to notification endpoints
if ( ! this.undefined_origin_allowed.includes(req.path) ) {
const undefined_origin_allowed = this.undefined_origin_allowed.some(rule => {
if ( typeof rule === 'string' ) return rule === req.path;
return rule.test(req.path);
});
if ( ! undefined_origin_allowed ) {
// check if no origin
if ( req.method === 'POST' && req.headers.origin === undefined ) {
event.allow = false;