AirenSoft / OvenMediaEngine

OvenMediaEngine (OME) is a Sub-Second Latency Live Streaming Server with Large-Scale and High-Definition. #WebRTC #LLHLS
https://OvenMediaEngine.com/ome
GNU Affero General Public License v3.0
2.48k stars 1.05k forks source link

LL-DASH publisher ignores CrossDomains configuration #377

Closed basisbit closed 2 years ago

basisbit commented 3 years ago

Describe the bug The CrossDomains configuration for a LL-DASH publisher / HTTP server seems to be ignored. Clients don't get the headers which tell the browser which website may have requested this data. This is a bit of a problem when trying to limit usage of the stream to your own website.

To Reproduce Steps to reproduce the behavior:

  1. Set up a minimal OBS -> RTMP -> origin -> OVT -> edge -> LL-DASH config
  2. specify a couple of CrossDomains for LL-DASH Publisher
  3. Request the stream using the reference-player and take a look at the segment response headers.

Expected behavior CORS headers should be set to only allow the content to be played in the requested domain. See https://airensoft.gitbook.io/ovenmediaengine/streaming/hls-mpeg-dash#crossdomain

Logs Nothing unusual.

Server (please complete the following information):

Player (please complete the following information):

ANDREY0214 commented 2 years ago

same problem any news?

basisbit commented 2 years ago

LL-DASH is still unusable because of other bugs.

getroot commented 2 years ago

We're sorry, but with the release of LLHLS, we have decided to no longer update LLDASH. Because LLHLS has better performance and compatibility, we decided it was a better decision for everyone to focus more of our energy on it.

Instead, we will continue to focus more on LLHLS and WebRTC. Thanks for your contribution.

basisbit commented 2 years ago

@getroot does the LLHLS implementation already honor CrossDomains configuration? If yes, then this issue here can be closed, imho.

getroot commented 2 years ago

@basisbit Yes, of course! LLHLS works well with crossdomain config. And it handles the PREFLIGHT Option as well.