hamed
87f4d1695f
- Implemented CorsRegexEnvProcessor to build CORS origin regex from a comma-separated host list (ALLOWED_FRONTEND_HOSTS). - Added tests for CorsRegexEnvProcessor to validate regex generation and matching behavior. - Created JSON files for AST representation of the new classes and tests.
17 lines
715 B
YAML
17 lines
715 B
YAML
nelmio_cors:
|
|
defaults:
|
|
origin_regex: true
|
|
allow_origin: ['%env(cors_regex:ALLOWED_FRONTEND_HOSTS)%']
|
|
allow_methods: ['GET', 'OPTIONS', 'POST', 'PATCH', 'DELETE']
|
|
allow_headers: ['Content-Type', 'Authorization', 'X-CSRF-Token', 'Content-Disposition']
|
|
expose_headers: ['X-RateLimit-Limit', 'X-RateLimit-Remaining', 'X-RateLimit-Reset']
|
|
max_age: 3600
|
|
allow_credentials: false
|
|
paths:
|
|
'^/api/':
|
|
allow_origin: ['%env(cors_regex:ALLOWED_FRONTEND_HOSTS)%']
|
|
'^/oauth/':
|
|
allow_origin: ['%env(cors_regex:ALLOWED_FRONTEND_HOSTS)%']
|
|
'^/health':
|
|
allow_origin: ['%env(cors_regex:ALLOWED_FRONTEND_HOSTS)%']
|