Congegni/sintonia
7
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Merge branch '3.0.x' into main

Browse source
This commit is contained in:
jo 2023-02-26 20:16:38 +01:00
commit 9384df7be2
No known key found for this signature in database
GPG key ID: B2FEC9B22722B984
16 changed files with 200 additions and 61 deletions
Download patch file Download diff file Expand all files Collapse all files

4
legacy/application/common/CORSHelper.php
View file

@ -10,7 +10,9 @@ class CORSHelper
if (!($origin == '' || preg_match('/https?:\/\/localhost/', $origin) === 1 || in_array($origin, $allowedOrigins))) {
// Don't allow CORS from other domains to prevent XSS.
Logging::error("request origin '{$origin}' is not in allowed '" . implode(', ', $allowedOrigins) . "'!");
Logging::error(
"request origin '{$origin}' is not in the configured 'allowed_cors_origins' '" . implode(', ', $allowedOrigins) . "'"
);
throw new Zend_Controller_Action_Exception('Forbidden', 403);
}