origin policy

This commit is contained in:
Jae Kwon 2015-04-02 10:59:45 -07:00
parent 543fc73ab6
commit 17390b38ba
2 changed files with 4 additions and 17 deletions

View File

@ -12,10 +12,6 @@ import (
"testing"
)
func init() {
// TODO: seed rand?
}
func randstr(length int) string {
return RandStr(length)
}

View File

@ -48,19 +48,10 @@ func RecoverAndLogHandler(handler http.Handler) http.Handler {
begin := time.Now()
// Common headers
rww.Header().Set("Access-Control-Allow-Origin", "*")
/*
origin := r.Header.Get("Origin")
originUrl, err := url.Parse(origin)
if err == nil {
originHost := strings.Split(originUrl.Host, ":")[0]
if strings.HasSuffix(originHost, ".tendermint.com") {
rww.Header().Set("Access-Control-Allow-Origin", origin)
rww.Header().Set("Access-Control-Allow-Credentials", "true")
rww.Header().Set("Access-Control-Expose-Headers", "X-Server-Time")
}
}
*/
origin := r.Header.Get("Origin")
rww.Header().Set("Access-Control-Allow-Origin", origin)
rww.Header().Set("Access-Control-Allow-Credentials", "true")
rww.Header().Set("Access-Control-Expose-Headers", "X-Server-Time")
rww.Header().Set("X-Server-Time", fmt.Sprintf("%v", begin.Unix()))
defer func() {