rpc: disable CORS if user has not specified custom config

a6af56fa · Bas van Kervel · 5884606e · a6af56fa
Unverified Commit a6af56fa authored May 02, 2017 by Bas van Kervel
Hide whitespace changes
Inline Side-by-side

Showing with 5 additions and 0 deletions

http.go rpc/http.go +5 -0

No files found.
--- a/rpc/http.go
+++ b/rpc/http.go
@@ -162,6 +162,11 @@ func (srv *Server) ServeHTTP(w http.ResponseWriter, r *http.Request) {
 }

 func newCorsHandler(srv *Server, allowedOrigins []string) http.Handler {
+	// disable CORS support if user has not specified a custom CORS configuration
+	if len(allowedOrigins) == 0 {
+		return srv
+	}
+
 	c := cors.New(cors.Options{
 		AllowedOrigins: allowedOrigins,
 		AllowedMethods: []string{"POST", "GET"},