mdenet / platformtools

Education platform tool functions.
Eclipse Public License 2.0
0 stars 3 forks source link

Xtext tool service does not use trusted origins env variable #38

Open barnettwilliam opened 9 months ago

barnettwilliam commented 9 months ago

The trusted origins header for the generated editor instance is not set using the TRUSTED_ORIGINS environment variable used elswhere by the platform. Instead, it is hardcoded into:

which if not set correctly the deployed editor instances cannot be accessed as the session cookie will not be used so requests for validation and autocompletion will be ignored.