Fix hardcoded jordan-siro URL in location server and origins
This commit is contained in:
@@ -43,7 +43,7 @@ header("X-XSS-Protection: 1; mode=block");
|
||||
|
||||
// CORS مع التحقق من المصدر المسموح
|
||||
$envOrigins = array_map('trim', explode(',', getenv('CORS_ALLOWED_ORIGINS') ?: ''));
|
||||
$defaultOrigins = ['https://siromove.com', 'https://admin.siromove.com', 'https://jordan-siro.intaleqapp.com', 'http://localhost', 'http://127.0.0.1'];
|
||||
$defaultOrigins = ['https://siromove.com', 'https://admin.siromove.com', 'https://api.intaleqapp.com', 'http://localhost', 'http://127.0.0.1'];
|
||||
$allowedOrigins = array_unique(array_merge($envOrigins, $defaultOrigins));
|
||||
$origin = $_SERVER['HTTP_ORIGIN'] ?? '';
|
||||
if (in_array($origin, $allowedOrigins)) {
|
||||
|
||||
Reference in New Issue
Block a user