Merge pull request #7138 from ORCID/RemoveLocalhostCheck

Localhost check is useless since now we use dev.orcid.org
ORCID · Nov 15, 2024 · e054616 · e054616
2 parents c2bd872 + 58f859c
commit e054616
Showing 1 changed file with 0 additions and 10 deletions.
diff --git a/orcid-core/src/main/java/org/orcid/core/web/filters/CrossDomainWebManger.java b/orcid-core/src/main/java/org/orcid/core/web/filters/CrossDomainWebManger.java
@@ -35,16 +35,6 @@ public boolean allowed(HttpServletRequest request) throws URISyntaxException {
             if (validateDomain(request.getHeader("origin"))) {
                 return true;
             } 
-        } else {
-            // Check referer header for localhost
-            String referer = request.getHeader("referer");
-            if (!PojoUtil.isEmpty(referer)) {
-                URI uri = new URI(request.getHeader("referer"));
-                String domain = uri.getHost();
-                if (LOCALHOST.equals(domain)) {
-                    return true;
-                }
-            }
         }
 
         // If it is and invalid domain, validate the path