add 0.0.0.0 as an allowed origin by default

Fixes #282
This commit is contained in:
Jeffrey Morgan 2023-08-08 13:39:50 -07:00
parent 22986ccb38
commit a027a7dd65

View file

@ -323,7 +323,6 @@ func CopyModelHandler(c *gin.Context) {
func Serve(ln net.Listener, extraOrigins []string) error { func Serve(ln net.Listener, extraOrigins []string) error {
config := cors.DefaultConfig() config := cors.DefaultConfig()
config.AllowWildcard = true config.AllowWildcard = true
// only allow http/https from localhost
allowedOrigins := []string{ allowedOrigins := []string{
"http://localhost", "http://localhost",
"http://localhost:*", "http://localhost:*",
@ -333,6 +332,10 @@ func Serve(ln net.Listener, extraOrigins []string) error {
"http://127.0.0.1:*", "http://127.0.0.1:*",
"https://127.0.0.1", "https://127.0.0.1",
"https://127.0.0.1:*", "https://127.0.0.1:*",
"http://0.0.0.0",
"http://0.0.0.0:*",
"https://0.0.0.0",
"https://0.0.0.0:*",
} }
allowedOrigins = append(allowedOrigins, extraOrigins...) allowedOrigins = append(allowedOrigins, extraOrigins...)
config.AllowOrigins = allowedOrigins config.AllowOrigins = allowedOrigins