From 7870ffece84871b51b9a8fc921ad6da5c29d61aa Mon Sep 17 00:00:00 2001 From: Nat Welch Date: Thu, 26 Aug 2021 19:12:11 -0400 Subject: [PATCH] fix(cors): Allow all origins to support 3rd party tools (#13383) --- website/server/middlewares/cors.js | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/website/server/middlewares/cors.js b/website/server/middlewares/cors.js index c3b10a2231..d6791da443 100644 --- a/website/server/middlewares/cors.js +++ b/website/server/middlewares/cors.js @@ -1,6 +1,6 @@ export default function corsMiddleware (req, res, next) { res.set({ - 'Access-Control-Allow-Origin': req.header('origin') || '*', + 'Access-Control-Allow-Origin': '*', 'Access-Control-Allow-Methods': 'OPTIONS,GET,POST,PUT,HEAD,DELETE', 'Access-Control-Allow-Headers': 'Authorization,Content-Type,Accept,Content-Encoding,X-Requested-With,x-api-user,x-api-key,x-client', // Expose rate limit headers to CORS requests