(origin string)
| 287 | } |
| 288 | |
| 289 | func isLoopbackOrigin(origin string) bool { |
| 290 | parsed, err := url.Parse(origin) |
| 291 | if err != nil { |
| 292 | return false |
| 293 | } |
| 294 | host := parsed.Hostname() |
| 295 | if strings.EqualFold(host, "localhost") { |
| 296 | return true |
| 297 | } |
| 298 | ip := net.ParseIP(host) |
| 299 | return ip != nil && ip.IsLoopback() |
| 300 | } |
| 301 | |
| 302 | func (s *Server) isAllowedOrigin(r *http.Request, origin string) bool { |
| 303 | if origin == "" { |