0
Fork 0
mirror of https://github.com/TryGhost/Ghost.git synced 2025-02-24 23:48:13 -05:00
ghost/core
Jason Williams 23c162796a Relax origin checking in auth middleware
Refs #6642
- Do not send CORS headers on an invalid "origin"
  header, but otherwise allow the response to
  proceed normally. This enforces CORS for the browser
  but does not blow up non-CORS requests.
2016-03-31 10:58:52 -05:00
..
client Merge pull request #6663 from kevinansfield/fix-xregexp-issues 2016-03-31 10:06:47 -05:00
server Relax origin checking in auth middleware 2016-03-31 10:58:52 -05:00
shared ensure null query options don't break ghost-url 2016-02-29 00:25:38 -06:00
test Relax origin checking in auth middleware 2016-03-31 10:58:52 -05:00
index.js