Github-Mirror/pocketbase
1
0 Fork 0
mirror of https://github.com/pocketbase/pocketbase.git synced 2026-10-06 06:21:44 +02:00
Code Issues Packages Projects Releases Wiki Activity

clarified cors wildcard support

Browse Source
This commit is contained in:
Gani Georgiev committed 2026-09-26 08:03:15 +03:00
1 parent 2ae117228e
commit 211b9645ee
1 file changed
+5 -3
Download Patch File Download Diff File Expand all files Collapse all files
apis/middlewares_cors.go
+5 -3
View File
@@ -31,9 +31,11 @@ const (
// CORSConfig defines the config for CORS middleware. // CORSConfig defines the config for CORS middleware.
type CORSConfig struct { type CORSConfig struct {
// AllowOrigins determines the value of the Access-Control-Allow-Origin // AllowOrigins determines the value of the Access-Control-Allow-Origin
// response header. This header defines a list of origins that may access the // response header. This header defines a list of origins that may access the
// resource. The wildcard characters '*' and '?' are supported and are // resource.
// converted to regex fragments '.*' and '.' accordingly. //
// The wildcard characters '*' and '?' are supported as subdomain segments
// and are converted to regex fragments '.*' and '.' accordingly.
// //
// Security: use extreme caution when handling the origin, and carefully // Security: use extreme caution when handling the origin, and carefully
// validate any logic. Remember that attackers may register hostile domain names. // validate any logic. Remember that attackers may register hostile domain names.