Use server.settings.cors.origin if allowOrigins unset and CORS enabled

hapijs / crumb

CSRF crumb generation and validation for hapi

Other

171 stars 51 forks source link

Use server.settings.cors.origin if allowOrigins unset and CORS enabled #30

Closed stongo closed 10 years ago

stongo commented 10 years ago

This will allow Crumb to work out of the box with CORS, but will still allow finer grained control of setting the crumb cookie to allowed CORS origins if desired.

stongo commented 10 years ago

Done

lock[bot] commented 4 years ago

This thread has been automatically locked due to inactivity. Please open a new issue for related bugs or questions following the new issue template instructions.