search

OpenHospitalityNetwork / fedi-trustroots

Next generation federated hospitality exchange platform
https://openHospitality.network
GNU Affero General Public License v3.0
23 stars 3 forks source link

Problem: offers api is not protected from unauthorized users and any cross origin calls #81

Open mariha opened 2 years ago

mariha commented 2 years ago

A follow up:

I disabled CORS and removed permission checks so these things have to be considered and tested to see what the implications are.

Originally posted by @chagai95 in https://github.com/OpenHospitalityNetwork/fedi-trustroots/pull/80

mariha commented 2 years ago

I moved the change to federation branch. It's not in master currently.