fix: CORS origin prefix matching

2025-06-11 07:30:21 -05:00 · 2025-06-11 07:30:21 -05:00 · d9111595a9
commit d9111595a9
parent 37b03b50c7
1 changed files with 16 additions and 6 deletions
--- a/src/index.ts
+++ b/src/index.ts
@ -16,12 +16,22 @@ const rootPath = "/api/altText/";
 app.use(
 	"*",
 	cors({
-		origin: [
+		origin: (origin) => {
+			const allowedOrigins = [
 				"https://indexx.dev",
-			"chrome-extension://*",
-			"safari-web-extension://*",
-			"moz-extension://*",
-		],
+				"chrome-extension://",
+				"safari-web-extension://",
+				"moz-extension://",
+			];
+
+			if (
+				origin &&
+				allowedOrigins.some((allowed) => origin.startsWith(allowed))
+			) {
+				return origin;
+			}
+			return null;
+		},
 		allowMethods: ["GET", "POST", "PUT", "DELETE", "OPTIONS"],
 		allowHeaders: ["*"],
 		maxAge: 600,