tested different CORS configuration

TUM-Dev · Jan 14, 2024 · 1fd1df7 · 1fd1df7
1 parent b26142d
commit 1fd1df7
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 4 deletions.
diff --git a/data/nginx.conf b/data/nginx.conf
@@ -30,8 +30,10 @@ http {
     gzip_vary on;
 
     # we allow other sites to fetch from us as we don't have any login/.. functionality => no cookies
-    add_header 'Access-Control-Allow-Origin' '*' always;
-    add_header 'Access-Control-Allow-Methods' 'GET, OPTIONS' always;
+    location / {
+      add_header 'Access-Control-Allow-Origin' '*' always;
+      add_header 'Access-Control-Allow-Methods' 'GET, OPTIONS' always;
+    }
 
     location = /cdn/health {
       access_log off;

diff --git a/webclient/nginx.conf b/webclient/nginx.conf
@@ -39,8 +39,10 @@ http {
     root /app;
 
     # we allow other sites to fetch from us as we don't have any login/.. functionality => no cookies
-    add_header 'Access-Control-Allow-Origin' '*' always;
-    add_header 'Access-Control-Allow-Methods' 'GET, OPTIONS' always;
+    location / {
+      add_header 'Access-Control-Allow-Origin' '*' always;
+      add_header 'Access-Control-Allow-Methods' 'GET, OPTIONS' always;
+    }
 
     # metadata
     location = /robots.txt { access_log off; }