varnish: Set Access-Control-Allow-Origin in frontend

miraheze · May 10, 2020 · 62c2687 · 62c2687
1 parent bd8b25f
commit 62c2687
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/modules/varnish/templates/default.vcl b/modules/varnish/templates/default.vcl
@@ -286,6 +286,10 @@ sub vcl_recv {
 
 	unset req.http.Proxy; # https://httpoxy.org/; CVE-2016-5385
 
+	if (req.url ~ "(?i)\.(gif|jpg|jpeg|pdf|png|css|js|json|woff|woff2|svg|eot|ttf|otf|ico|sfnt)$") {
+		set resp.http.Access-Control-Allow-Origin = "*";
+	}
+
 	# Normalize Accept-Encoding for better cache hit ratio
 	if (req.http.Accept-Encoding) {
 		if (req.url ~ "\.(jpg|png|gif|gz|tgz|bz2|tbz|mp3|ogg)$") {