shekhar/windows-iso-downloader
1
0
Fork 0
Code Issues Pull requests Projects Releases 15 Packages Wiki Activity Actions

security: restrict CORS and remove test UI from root

Browse source
This commit is contained in:
Shekhar Vaidya 2026-04-10 20:52:56 +05:30
parent 722d211197
commit 3b18b08c0a
1 changed files with 14 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

18
backend/main.go
View file

@ -128,7 +128,12 @@ func cleanupSessions() {
// Middleware for CORS
func enableCORS(next http.Handler) http.Handler {
return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
w.Header().Set("Access-Control-Allow-Origin", "*")
origin := r.Header.Get("Origin")
// Allowed origins
if origin == "https://msdl.tech-latest.com" || origin == "http://localhost:5173" || origin == "http://localhost:3000" {
w.Header().Set("Access-Control-Allow-Origin", origin)
}
w.Header().Set("Access-Control-Allow-Methods", "GET, OPTIONS")
w.Header().Set("Access-Control-Allow-Headers", "Content-Type")
if r.Method == "OPTIONS" {
@ -366,9 +371,14 @@ func main() {
w.Write([]byte(`{"status":"ok"}`))
})
// Static UI Server
fs := http.FileServer(http.Dir("./public"))
mux.Handle("/", fs)
// Plain root response
mux.HandleFunc("/", func(w http.ResponseWriter, r *http.Request) {
if r.URL.Path != "/" {
http.NotFound(w, r)
return
}
w.Write([]byte("MSDL API v3 is running"))
})
handler := enableCORS(mux)