settings values json instead of strings

2024-04-11 14:41:03 -04:00
parent 3851b7f289
commit 3888e7fcde
9 changed files with 111 additions and 47 deletions
--- a/Core/API/Request.class.php
+++ b/Core/API/Request.class.php
@@ -171,6 +171,8 @@ abstract class Request {
    if ($this->externalCall) {
      $trustedDomains = $this->getCORS();
      if (!empty($trustedDomains)) {
+        // TODO: origins require a protocol, e.g. https:// or http:// as prefix. 
+        // should we force https for all origins? or make exceptions for localhost?
        header("Access-Control-Allow-Origin: " . implode(", ", $trustedDomains));
      }
    }