Skip to content
Snippets Groups Projects
  1. Mar 23, 2021
  2. Mar 22, 2021
  3. Mar 17, 2021
  4. Mar 16, 2021
  5. Mar 15, 2021
  6. Mar 14, 2021
  7. Mar 13, 2021
  8. Mar 07, 2021
    • Jeremy Lin's avatar
      CORS fixes · 7d0e234b
      Jeremy Lin authored
      * The Safari extension apparently now uses the origin `file://` and expects
        that to be returned (see bitwarden/browser#1311, bitwarden/server#800).
      
      * The `Access-Control-Allow-Origin` header was reflecting the value of the
        `Origin` header without checking whether the origin was actually allowed.
        This effectively allows any origin to interact with the server, which
        defeats the purpose of CORS.
      7d0e234b
  9. Mar 06, 2021
  10. Mar 05, 2021
  11. Mar 04, 2021
  12. Feb 28, 2021
  13. Feb 27, 2021
  14. Feb 24, 2021
  15. Feb 20, 2021
  16. Feb 19, 2021
  17. Feb 15, 2021
  18. Feb 14, 2021
  19. Feb 07, 2021
Loading