mirror of
https://github.com/Growstuff/growstuff.git
synced 2026-05-14 03:05:59 -04:00
Only allow open CORS on the api
This commit is contained in:
committed by
Brenda Wallace
parent
32972a90fd
commit
5600670fef
@@ -108,7 +108,7 @@ module Growstuff
|
||||
config.middleware.insert_before 0, Rack::Cors do
|
||||
allow do
|
||||
origins '*'
|
||||
resource '*', headers: :any, methods: [:get, :post, :options]
|
||||
resource '/api/v1/*', headers: :any, methods: [:get, :post, :options]
|
||||
end
|
||||
end
|
||||
end
|
||||
|
||||
Reference in New Issue
Block a user