From d9111595a97fc9c0c0afeb93424cf3906392b16f Mon Sep 17 00:00:00 2001
From: Index <xv.media.address@gmail.com>
Date: Wed, 11 Jun 2025 07:30:21 -0500
Subject: [PATCH] fix: CORS origin prefix matching

---
 src/index.ts | 22 ++++++++++++++++------
 1 file changed, 16 insertions(+), 6 deletions(-)

diff --git a/src/index.ts b/src/index.ts
index bdcc930..333295d 100644
--- a/src/index.ts
+++ b/src/index.ts
@@ -16,12 +16,22 @@ const rootPath = "/api/altText/";
 app.use(
 	"*",
 	cors({
-		origin: [
-			"https://indexx.dev",
-			"chrome-extension://*",
-			"safari-web-extension://*",
-			"moz-extension://*",
-		],
+		origin: (origin) => {
+			const allowedOrigins = [
+				"https://indexx.dev",
+				"chrome-extension://",
+				"safari-web-extension://",
+				"moz-extension://",
+			];
+
+			if (
+				origin &&
+				allowedOrigins.some((allowed) => origin.startsWith(allowed))
+			) {
+				return origin;
+			}
+			return null;
+		},
 		allowMethods: ["GET", "POST", "PUT", "DELETE", "OPTIONS"],
 		allowHeaders: ["*"],
 		maxAge: 600,