Skip to content
Snippets Groups Projects
  1. Mar 28, 2021
  2. Mar 27, 2021
  3. Mar 25, 2021
  4. Mar 23, 2021
  5. Mar 22, 2021
  6. Mar 17, 2021
  7. Mar 16, 2021
  8. Mar 15, 2021
  9. Mar 14, 2021
  10. Mar 13, 2021
  11. Mar 07, 2021
    • Jeremy Lin's avatar
      CORS fixes · 7d0e234b
      Jeremy Lin authored
      * The Safari extension apparently now uses the origin `file://` and expects
        that to be returned (see bitwarden/browser#1311, bitwarden/server#800).
      
      * The `Access-Control-Allow-Origin` header was reflecting the value of the
        `Origin` header without checking whether the origin was actually allowed.
        This effectively allows any origin to interact with the server, which
        defeats the purpose of CORS.
      7d0e234b
  12. Mar 06, 2021
Loading