fix: added permissive CORS to api

evilsocket · Jul 20, 2024 · a8508a3 · a8508a3
1 parent e312894
commit a8508a3
Show file tree

Hide file tree

Showing 3 changed files with 21 additions and 0 deletions.
diff --git a/Cargo.lock b/Cargo.lock
diff --git a/Cargo.toml b/Cargo.toml
@@ -91,6 +91,7 @@ actix-web = "4.8.0"
 uuid = "1.10.0"
 nix = { version = "0.29.0", features = ["signal"] }
 strip-ansi-escapes = "0.2.0"
+actix-cors = "0.7.0"
 
 [dev-dependencies]
 tempfile = "3.8.0"

diff --git a/src/api/mod.rs b/src/api/mod.rs
@@ -1,5 +1,6 @@
 use std::sync::Arc;
 
+use actix_cors::Cors;
 use actix_web::web;
 use actix_web::App;
 use actix_web::HttpResponse;
@@ -47,7 +48,10 @@ pub(crate) async fn start(opts: Options) -> Result<(), Error> {
     let state = Arc::new(RwLock::new(Sessions::new(opts.concurrency)));
 
     HttpServer::new(move || {
+        let cors = Cors::default().allow_any_origin().send_wildcard();
+
         App::new()
+            .wrap(cors)
             .app_data(web::Data::new(state.clone()))
             .configure(config)
             .default_service(web::route().to(not_found))