From 62a85bbe77a83d7b783cdc882c90752030d49f28 Mon Sep 17 00:00:00 2001 From: Ryan Barber Date: Fri, 24 Nov 2017 22:44:01 -0800 Subject: [PATCH] Add CORS handling to podcast feed --- airtime_mvc/application/controllers/FeedsController.php | 9 ++++++--- 1 file changed, 6 insertions(+), 3 deletions(-) diff --git a/airtime_mvc/application/controllers/FeedsController.php b/airtime_mvc/application/controllers/FeedsController.php index d882b57dd..9d26e4101 100644 --- a/airtime_mvc/application/controllers/FeedsController.php +++ b/airtime_mvc/application/controllers/FeedsController.php @@ -7,14 +7,17 @@ class FeedsController extends Zend_Controller_Action $this->view->layout()->disableLayout(); $this->_helper->viewRenderer->setNoRender(true); + $request = $this->getRequest(); + $response = $this->getResponse(); + if ((Application_Model_Preference::getStationPodcastPrivacy() - && $this->getRequest()->getParam("sharing_token") != Application_Model_Preference::getStationPodcastDownloadKey()) + && $request->getParam("sharing_token") != Application_Model_Preference::getStationPodcastDownloadKey()) && !RestAuth::verifyAuth(true, false, $this)) { - $this->getResponse() - ->setHttpResponseCode(401); + $response->setHttpResponseCode(401); return; } + CORSHelper::enableCrossOriginRequests($request, $response); $rssData = Application_Service_PodcastService::createStationRssFeed();