-
Notifications
You must be signed in to change notification settings - Fork 77
Open
Description
endpoint.ex :
import AppName.ConfigHelpers
...
plug CORSPlug, origin: cors_origins(), headers: cors_headers()
Inside ConfigHelpers :
def cors_origins() do
if System.get_env("ENV") == "production" do
[@origin_regex, "https://other.com"]
else
["*"]
end
end
def cors_headers() do
["test_wrong_header"]
end
The origins are good, but I have an impression that all headers are allowed, If I deploy with that list [“test_wrong_header”], the request is accepted.
Metadata
Metadata
Assignees
Labels
No labels