Closed mbrkdev closed 5 years ago
Just like ordinary behaviour, CORS should default to * and be progressively locked down rather than default to localhost:3000. Also a single origin should be allowed.
Code currently on master, needs to be cleaned up before pushing to npm
Ideally having * as the origin would replace the function call in origin, not sure of the overhead. Will have to test.
Fixed in https://github.com/jetdevuk/sylph/commit/1df7a7d90ce3d7158618c8795def71df09cd0f62
Just like ordinary behaviour, CORS should default to * and be progressively locked down rather than default to localhost:3000. Also a single origin should be allowed.