Skip to content

Conversation

@angelo-v
Copy link
Contributor

The proxy should only be turned on deliberately, because it can be abused by spammers

@angelo-v angelo-v changed the title disable cors-proxy by default docker image: disable cors-proxy by default Jan 15, 2021
@bourgeoa
Copy link
Member

@angelo-v ready to merge. I just want understand.
Does your patch mean that with proxy = false, you let solid is take care of CORS with the trusted app.

@angelo-v
Copy link
Contributor Author

No, if this is not false, but any url path, NSS serves a proxy on that path that can proxy any other site. I think this was meant to be able to proxy requests that get CORS errors, but I never saw it working

@bourgeoa bourgeoa merged commit 44e9ce7 into master Jan 22, 2021
@angelo-v angelo-v deleted the disable-cors-proxy branch January 23, 2021 12:28
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants