Use same CORS policy for /@:username and /users/:username (#9485)

Fixes #8189

rack-cors being called before the application router, it does not follow
the redirection, and we need a separate rule for /users/:username.
pull/9473/head
ThibG 2018-12-10 21:39:47 +01:00 committed by Eugen Rochko
parent ed24bb2c3e
commit 3f12c07ff5
1 changed files with 4 additions and 0 deletions

View File

@ -17,6 +17,10 @@ Rails.application.config.middleware.insert_before 0, Rack::Cors do
headers: :any, headers: :any,
methods: [:get], methods: [:get],
credentials: false credentials: false
resource '/users/:username',
headers: :any,
methods: [:get],
credentials: false
resource '/api/*', resource '/api/*',
headers: :any, headers: :any,
methods: [:post, :put, :delete, :get, :patch, :options], methods: [:post, :put, :delete, :get, :patch, :options],