From 45a4a50812bdac30100ea703cdb3b89b0491ea12 Mon Sep 17 00:00:00 2001 From: hippoz Date: Sat, 23 Jan 2021 00:25:21 +0200 Subject: [PATCH] allow requests without origin header to api domain --- index.js | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/index.js b/index.js index adf7ba6..9d57495 100755 --- a/index.js +++ b/index.js @@ -19,7 +19,7 @@ app.use(express.json()); app.use(cookieParser()); app.use(cors({ origin: function (origin, callback) { - if (config.corsAllowList.indexOf(origin) !== -1) { + if (config.corsAllowList.indexOf(origin) !== -1 || !origin) { callback(null, true); } else { callback(new Error('Not allowed by CORS'));