Skip to content

fix(cors): all origins could pass when allow_origins_by_metadata is set#10948

Merged
juststillthinking merged 13 commits into
apache:masterfrom
theweakgod:fix/cors_meta_and_local_allow_origin_diff
Feb 26, 2024
Merged

fix(cors): all origins could pass when allow_origins_by_metadata is set#10948
juststillthinking merged 13 commits into
apache:masterfrom
theweakgod:fix/cors_meta_and_local_allow_origin_diff

Conversation

@theweakgod

Copy link
Copy Markdown
Contributor

Description

Fixes #10946

Resolved the issue where all origins could pass through when allow_origins_by_metadata was set and allow_origins was set to the default value "*".

Checklist

  • I have explained the need for this PR and the problem it solves
  • I have explained the changes or the new features added to this PR
  • I have added tests corresponding to this change
  • I have updated the documentation to reflect this change
  • I have verified that this change is backward compatible (If not, please discuss on the APISIX mailing list first)

@theweakgod theweakgod changed the title Fix: add cors allow_origins * invalid while allow_origins_by_metadata is set fix: add cors allow_origins * invalid while allow_origins_by_metadata is set Feb 20, 2024
@juststillthinking

Copy link
Copy Markdown
Contributor

Let's discuss in the issue

@theweakgod

Copy link
Copy Markdown
Contributor Author

Let's discuss in the issue

👌

@sheharyaar

Copy link
Copy Markdown
Contributor

Tested it locally, Works as intended, LGTM.

@juststillthinking juststillthinking changed the title fix: add cors allow_origins * invalid while allow_origins_by_metadata is set fix(cors): all origins could pass when allow_origins_by_metadata is set Feb 26, 2024
@juststillthinking
juststillthinking merged commit bc000a9 into apache:master Feb 26, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

bug: allow_origins_by_metadata does not work without allow_origins

5 participants