From acbf36e21b8ed2fe4f0efef17ae77a7ed1a8b3e0 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Lumi=C3=A8re=20=C3=89lev=C3=A9?=
<88174309+PoneyClairDeLune@users.noreply.github.com>
Date: Fri, 20 Sep 2024 08:55:54 +0100
Subject: [PATCH] SplitHTTP server: Add global CORS headers for browser dialer
(#3830)
---
transport/internet/splithttp/config.go | 3 +++
1 file changed, 3 insertions(+)
diff --git a/transport/internet/splithttp/config.go b/transport/internet/splithttp/config.go
index 5309b180..eb32adf7 100644
--- a/transport/internet/splithttp/config.go
+++ b/transport/internet/splithttp/config.go
@@ -55,6 +55,9 @@ func (c *Config) GetRequestHeader() http.Header {
}
func (c *Config) WriteResponseHeader(writer http.ResponseWriter) {
+ // CORS headers for the browser dialer
+ writer.Header().Set("Access-Control-Allow-Origin", "*")
+ writer.Header().Set("Access-Control-Allow-Methods", "GET, POST")
paddingLen := c.GetNormalizedXPaddingBytes().roll()
if paddingLen > 0 {
writer.Header().Set("X-Padding", strings.Repeat("0", int(paddingLen)))