limit cors only get, head, options

linprimis · Dec 19, 2023 · ea72724 · ea72724
1 parent 80c9e79
commit ea72724
Show file tree

Hide file tree

Showing 4 changed files with 4 additions and 2 deletions.
diff --git a/.gitignore b/.gitignore
@@ -31,3 +31,4 @@ assets_vfsdata.go
 *.swp
 
 dist/
+.DS_Store
diff --git a/README.md b/README.md
@@ -33,7 +33,7 @@ Tested with go-1.16
 1. [x] Apple ipa auto generate .plist file, qrcode can be recognized by iphone (Require https)
 1. [x] Plist proxy
 1. [ ] Download count statistics
-1. [x] CORS enabled
+1. [x] CORS enabled (AllowMethods: GET, HEAD, OPTIONS)
 1. [ ] Offline download
 1. [ ] Code file preview
 1. [ ] Edit file support

diff --git a/main.go b/main.go
@@ -207,7 +207,7 @@ func main() {
 
 	// CORS
 	if gcfg.Cors {
-		hdlr = handlers.CORS()(hdlr)
+		hdlr = handlers.CORS(handlers.AllowedMethods([]string{"GET", "HEAD", "OPTIONS"}))(hdlr)
 	}
 	if gcfg.XHeaders {
 		hdlr = handlers.ProxyHeaders(hdlr)

diff --git a/testdata/filetypes/script.js b/testdata/filetypes/script.js
@@ -0,0 +1 @@
+document.write("Hello world!")
Original file line number	Diff line number	Diff line change
Expand Up		@@ -31,3 +31,4 @@ assets_vfsdata.go
		*.swp

		dist/
		.DS_Store