mirror of
https://github.com/dani-garcia/vaultwarden.git
synced 2026-03-10 16:03:33 +02:00
Support new desktop origin on CORS (#6920)
This commit is contained in:
@@ -153,9 +153,11 @@ impl Cors {
|
||||
fn get_allowed_origin(headers: &HeaderMap<'_>) -> Option<String> {
|
||||
let origin = Cors::get_header(headers, "Origin");
|
||||
let safari_extension_origin = "file://";
|
||||
let desktop_custom_file_origin = "bw-desktop-file://bundle";
|
||||
|
||||
if origin == CONFIG.domain_origin()
|
||||
|| origin == safari_extension_origin
|
||||
|| origin == desktop_custom_file_origin
|
||||
|| (CONFIG.sso_enabled() && origin == CONFIG.sso_authority())
|
||||
{
|
||||
Some(origin)
|
||||
|
||||
Reference in New Issue
Block a user