Merge pull request #149 from excalidraw/fix_cors

2021-01-14 14:29:59 +01:00 · 2021-01-14 14:29:59 +01:00 · dda25d7920
commit dda25d7920
parent cc4a6ce1b9 1cc554339d
1 changed files with 2 additions and 1 deletions
--- a/src/index.ts
+++ b/src/index.ts
@ -24,7 +24,8 @@ const io = socketIO(server, {
  handlePreflightRequest: function (req, res) {
    var headers = {
      "Access-Control-Allow-Headers": "Content-Type, Authorization",
-      "Access-Control-Allow-Origin": req.header ? req.header.origin : "*",
+      "Access-Control-Allow-Origin":
+        (req.header && req.header.origin) || "https://excalidraw.com",
      "Access-Control-Allow-Credentials": true,
    };
    res.writeHead(200, headers);