better cors fix

CinquinAndy · Mar 24, 2024 · 8da188e · 8da188e
1 parent 5d8c6af
commit 8da188e
Showing 1 changed file with 3 additions and 2 deletions.
diff --git a/config/middlewares.js b/config/middlewares.js
@@ -7,8 +7,9 @@ module.exports = ({env}) => {
             name: "strapi::security",
             config: {
                 cors: {
-                    origin: ['*'], //allow all origins
-                    headers: ['*'], //allow all headers
+                    origin: ['app://obsidian.md'],
+                    methods: ['GET', 'POST', 'PUT', 'DELETE', 'OPTIONS', 'HEAD'],
+                    headers: ['Content-Type', 'Authorization'],
                 },
                 contentSecurityPolicy: {
                     useDefaults: true,