Detect host from list of allowed urls even if they have http/https

2026-06-28 19:00:59 +03:00 · 2024-03-05 17:23:49 +05:30
parent d0ddf018c7
commit d706ca389f
2 changed files with 6 additions and 5 deletions
@@ -1332,7 +1332,11 @@ export class App {
                    if (parsedConfig.allowedOrigins && parsedConfig.allowedOrigins.length > 0 && isValidAllowedOrigins) {
                        const originHeader = req.headers.origin as string
                        const origin = new URL(originHeader).host
-                        isDomainAllowed = parsedConfig.allowedOrigins.includes(origin)
+                        isDomainAllowed =
+                            parsedConfig.allowedOrigins.filter((domain: string) => {
+                                const allowedOrigin = new URL(domain).host
+                                return origin === allowedOrigin
+                            }).length > 0
                    }
                }