Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add access-control-allow-private-network to the preflight #1363

Merged
merged 3 commits into from
Sep 26, 2023

Conversation

directionless
Copy link
Contributor

@@ -308,6 +308,10 @@ func (ls *localServer) preflightCorsHandler(next http.Handler) http.Handler {
w.Header().Set("Access-Control-Allow-Headers",
"Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization")

// Some modern chrome and derivatives use Access-Control-Allow-Private-Network
// https://developer.chrome.com/blog/private-network-access-preflight/
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

https://developer.chrome.com/blog/private-network-access-update/ newer docs say this is going to be deprecated -- do we want to add a note about that?

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
// https://developer.chrome.com/blog/private-network-access-preflight/
// https://developer.chrome.com/blog/private-network-access-preflight/
// Though it's unclear if this is still needed, see https://developer.chrome.com/blog/private-network-access-update/

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Maybe like that?

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Works for me!

@directionless directionless added this pull request to the merge queue Sep 26, 2023
Merged via the queue into kolide:main with commit d1e0359 Sep 26, 2023
@directionless directionless deleted the directionless-patch-1 branch September 26, 2023 12:51
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants