Skip to content
This repository has been archived by the owner on Feb 8, 2024. It is now read-only.

cors: allow every origin hostname, in case host header is rewritten #50

Closed
wants to merge 1 commit into from

Conversation

xvello
Copy link
Contributor

@xvello xvello commented Nov 14, 2023

Our reverse proxy recommendations ask to rewrite the Host header, so AllowOrigin::mirror_request() returns app.posthog.com instead of the browser-facing domain, which makes CORS check fail.

@xvello xvello requested a review from ellie November 14, 2023 14:28
@xvello xvello closed this Nov 14, 2023
@xvello xvello deleted the xvello/verycors branch November 14, 2023 14:38
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant