Allow only one origin

jenkinsci · Dec 1, 2022 · 61c73da · 61c73da
1 parent b81c677
commit 61c73da
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 3 deletions.
diff --git a/src/main/java/com/browserstack/automate/ci/jenkins/observability/AccessControlsFilter.java b/src/main/java/com/browserstack/automate/ci/jenkins/observability/AccessControlsFilter.java
@@ -63,11 +63,10 @@ public void init(FilterConfig filterConfig) throws ServletException {
     public void doFilter(ServletRequest request, ServletResponse response, FilterChain chain)
             throws IOException, ServletException {
         HttpServletRequest req = (HttpServletRequest) request;
-        String origin = req.getHeader("Origin");
         HttpServletResponse resp = (HttpServletResponse) response;
 
         resp.addHeader("Access-Control-Allow-Credentials", "true");
-        resp.addHeader("Access-Control-Allow-Origin", "*");
+        resp.addHeader("Access-Control-Allow-Origin", "https://observability.browserstack.com");
         resp.addHeader("Access-Control-Allow-Methods", "POST, GET, OPTIONS, PUT");
         resp.addHeader("Access-Control-Allow-Headers", "*");
         resp.addHeader("Access-Control-Expose-Headers", "*");

diff --git a/...om/browserstack/automate/ci/jenkins/observability/BuildWithObservabilityConfigAction.java b/...om/browserstack/automate/ci/jenkins/observability/BuildWithObservabilityConfigAction.java
@@ -11,7 +11,7 @@
 import java.lang.reflect.Field;
 import java.lang.reflect.Method;
 import java.util.*;
-import java.util.concurrent.TimeUnit;
+import java.util.concurrent.TimeUnit; 
 import java.util.stream.Collectors;
 import javax.annotation.CheckForNull;
 import javax.annotation.Nonnull;