From 16bd93f56605dc0db9843d22ebcaa8f9f580420d Mon Sep 17 00:00:00 2001 From: ririxidev Date: Sat, 18 Dec 2021 21:30:39 +0100 Subject: [PATCH] fix(socketManager): Fix checking Origin header * Checking if Origin isn't here allows to deny requests that are coming from websites since Extension doesn't send Origin header. --- src/managers/socketManager.ts | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/src/managers/socketManager.ts b/src/managers/socketManager.ts index 2ad4aeb..f077d2c 100644 --- a/src/managers/socketManager.ts +++ b/src/managers/socketManager.ts @@ -24,7 +24,10 @@ export function init() { io = new socketIo.Server(server, { serveClient: false, allowEIO3: true, - cors: { origin: "*" } + allowRequest: (req, callback) => { + const noOriginHeader = req.headers.origin === undefined; + callback(null, noOriginHeader); + } }); server.listen(3020, () => { //* Resolve promise