Allow CORS for suggestions on https://shields.io

Issue raised here: https://twitter.com/igoradamenko_/status/818095292146941952
This commit is contained in:
Thaddee Tyl 2017-01-08 16:36:32 +01:00
parent 78494dd6ff
commit 9816a5010f

View File

@ -14,7 +14,14 @@ try {
// - badge: shields image URL. // - badge: shields image URL.
// - name: string // - name: string
var suggest = function(data, end, ask) { var suggest = function(data, end, ask) {
ask.res.setHeader('Access-Control-Allow-Origin', 'http://shields.io'); var origin = ask.req.headers['origin'];
if (/^https?:\/\/shields\.io$/.test(origin)) {
ask.res.setHeader('Access-Control-Allow-Origin', origin);
} else {
ask.res.setHeader('Access-Control-Allow-Origin', 'null');
end({err:'Disallowed'});
return;
}
try { try {
var url = nodeUrl.parse(data.url); var url = nodeUrl.parse(data.url);
} catch(e) { end({err:''+e}); return; } } catch(e) { end({err:''+e}); return; }