Skip to content
Snippets Groups Projects
  1. Mar 25, 2021
  2. Mar 23, 2021
  3. Mar 22, 2021
  4. Mar 17, 2021
  5. Mar 16, 2021
  6. Mar 15, 2021
  7. Mar 14, 2021
  8. Mar 13, 2021
  9. Mar 07, 2021
    • Jeremy Lin's avatar
      CORS fixes · 7d0e234b
      Jeremy Lin authored
      * The Safari extension apparently now uses the origin `file://` and expects
        that to be returned (see bitwarden/browser#1311, bitwarden/server#800).
      
      * The `Access-Control-Allow-Origin` header was reflecting the value of the
        `Origin` header without checking whether the origin was actually allowed.
        This effectively allows any origin to interact with the server, which
        defeats the purpose of CORS.
      7d0e234b
  10. Mar 06, 2021
  11. Mar 05, 2021
  12. Mar 04, 2021
  13. Feb 28, 2021
  14. Feb 27, 2021
  15. Feb 24, 2021
  16. Feb 20, 2021
Loading