zooniverse / zoo-stats-api-graphql

0 stars 2 forks source link

Whitelist domains #43

Closed AroneyS closed 5 years ago

AroneyS commented 5 years ago
# gem 'rack-cors'
# Use Rack CORS for handling Cross-Origin Resource Sharing (CORS), making cross-origin AJAX possible

Cam: we may want to put keep this in to whitelist the domains that can access the stats system in production - not blocking and can come in another PR. Example via https://github.com/zooniverse/zoo-event-stats/blob/22eaf89a41cfedc163d5d106996957d6f4b03452/lib/api/api.rb#L16