docs/leetcode
1
0
Fork 0
mirror of https://github.com/prdlk/leetcode.git synced 2026-09-16 23:16:26 +00:00
Code Issues Packages Projects Releases Wiki Activity

srs-api: allowlist both docs origins for /api/stats CORS

Browse Source
This commit is contained in:
Prad Nukala
2026-08-24 19:12:11 -04:00
parent 7213cc1c8a
commit ab5c251952
2 changed files with 7 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
api/src/index.ts
+6 -1
View File
@@ -261,8 +261,13 @@ export default {
}
if (path === "/api/stats") {
// The docs serve from both the Pages origin and the custom domain;
// reflect the requesting origin only when it is on the allowlist.
const allowed = env.DOCS_ORIGIN.split(",").map((o) => o.trim());
const origin = request.headers.get("origin");
const cors = {
"access-control-allow-origin": env.DOCS_ORIGIN,
"access-control-allow-origin":
origin && allowed.includes(origin) ? origin : allowed[0]!,
"access-control-allow-methods": "GET",
vary: "Origin",
};