Function parseAllowedOrigins

packages/server/src/utils/XSS.ts:59–70

(allowedOrigins: string)

}

function parseAllowedOrigins(allowedOrigins: string): string[] {
    if (!allowedOrigins) {
        return []
    }
    if (allowedOrigins === '*') {
        return ['*']
    }
    return allowedOrigins
        .split(',')
        .map((origin) => origin.trim().toLowerCase())
        .filter((origin) => origin.length > 0)
}

export function validateCorsConfig(): void {
    if (getAllowedCorsOrigins() === '*' && getAllowCredentials()) {