Merge pull request #448 from decentraland/feat/add-cors-origins

feat: Add CORS origin
decentraland · Apr 17, 2024 · 0db02c7 · 0db02c7
2 parents 7853c9d + 82111fb
commit 0db02c7
Showing 1 changed file with 11 additions and 3 deletions.
diff --git a/src/server.ts b/src/server.ts
@@ -56,7 +56,13 @@ app.set("x-powered-by", false)
 app.use(withLogs())
 app.use("/api", [
   withDDosProtection(),
-  withCors(),
+  withCors({
+    corsOrigin: [
+      /^http:\/\/localhost:[0-9]{1,10}$/,
+      /^https:\/\/(.{1,50}\.)?decentraland\.(zone|today|org)$/,
+    ],
+    allowedHeaders: "*",
+  }),
   withBody(),
   categoryRoute,
   userFavoriteRoute,
@@ -75,8 +81,10 @@ app.use(metrics([gatsbyRegister, register]))
 app.use("/places", socialRoutes)
 app.use("/places", [
   withCors({
-    cors: "*",
-    corsOrigin: "*",
+    corsOrigin: [
+      /^http:\/\/localhost:[0-9]{1,10}$/,
+      /^https:\/\/(.{1,50}\.)?decentraland\.(zone|today|org)$/,
+    ],
     allowedHeaders: "*",
   }),
   gatsby(resolve(__filename, "../../public"), {