Implement Access-Control-Allow-Origin headers for the webhook endpoint

copyhackers / airstory-wp

Send your blog posts from Airstory writing software to WordPress for publication.

https://wordpress.org/plugins/airstory

MIT License

4 stars 1 forks source link

Closed stevegrunwell closed 6 years ago

stevegrunwell commented 6 years ago

This PR overrides the default WP REST API CORS headers for the Airstory webhook, only permitting requests from https://app.airstory.co.

This is related to, but does not completely take care of, #74.