2025-summer/team-3
12
Fork 0
Code Issues Pull requests Projects Releases Activity

set the allow-origin header to the value of the origin header

Browse source
This commit is contained in:
Laura Klünder 2017-12-24 05:43:19 +01:00
parent 94731ddf04
commit 829b118e27
1 changed files with 7 additions and 8 deletions
Download patch file Download diff file Expand all files Collapse all files

15
src/c3nav/mapdata/api.py
View file

@ -419,12 +419,11 @@ class UpdatesViewSet(GenericViewSet):
except ValueError: except ValueError:
cache.set('api_updates_fetch_requests', 0, None) cache.set('api_updates_fetch_requests', 0, None)
cross_origin = False cross_origin = request.META.get('HTTP_ORIGIN')
if 'HTTP_ORIGIN' in request.META: if cross_origin is not None:
cross_origin = True
try: try:
if request.META['HTTP_HOST'] == urlparse(request.META['HTTP_ORIGIN']).hostname: if request.META['HTTP_HOST'] == urlparse(cross_origin).hostname:
cross_origin = False cross_origin = None
except ValueError: except ValueError:
pass pass
@ -434,14 +433,14 @@ class UpdatesViewSet(GenericViewSet):
'last_site_update': SiteUpdate.last_update(), 'last_site_update': SiteUpdate.last_update(),
'last_map_update': MapUpdate.current_processed_cache_key(), 'last_map_update': MapUpdate.current_processed_cache_key(),
} }
if not cross_origin: if cross_origin is None:
result.update({ result.update({
'user': get_user_data(request), 'user': get_user_data(request),
}) })
response = Response(result) response = Response(result)
if cross_origin: if cross_origin is not None:
response['Access-Control-Allow-Origin'] = '*' response['Access-Control-Allow-Origin'] = cross_origin
response['Access-Control-Allow-Credentials'] = 'true' response['Access-Control-Allow-Credentials'] = 'true'
set_tile_access_cookie(request, response) set_tile_access_cookie(request, response)