From b8ffc1ada091a7569230dfa15dde9fe7a26a4733 Mon Sep 17 00:00:00 2001
From: jelveh <nj@puter.com>
Date: Fri, 18 Jul 2025 20:27:50 -0700
Subject: [PATCH] Allow CORS on `/extensions/`

---
 src/backend/src/modules/web/WebServerService.js | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/backend/src/modules/web/WebServerService.js b/src/backend/src/modules/web/WebServerService.js
index cb319b58b..4c4fcfa62 100644
--- a/src/backend/src/modules/web/WebServerService.js
+++ b/src/backend/src/modules/web/WebServerService.js
@@ -612,7 +612,7 @@ class WebServerService extends BaseService {
                 req.co_isolation_enabled
                 ;
 
-            if ( req.path === '/signup' || req.path === '/login' ) {
+            if ( req.path === '/signup' || req.path === '/login' || req.path.startsWith('/extensions/') ) {
                 res.setHeader('Access-Control-Allow-Origin', origin ?? '*');
             }
             // Website(s) to allow to connect