Skip to content

set access-control-allow-origin to referrer host

Administrator requested to merge cors-referer-host into main

Created by: arussellsaw

it turns out using prod to test this was a really dumb idea, the feedback loop is so wide, i could have probably sorted this in a single PR if i wasn't so lazy.

using r.Host was never gonna work, as that's the request host not the site requesting it 🙄

Merge request reports