瀏覽代碼

Log a warning when a user is rejected from accessing real-time by CORS

GitOrigin-RevId: 04a7ffbc24654c876688db446164bf36a162828f
Andrew Rumble 1 年之前
父節點
當前提交
adb9723d62
共有 1 個文件被更改,包括 6 次插入 和 0 次删除
  1. 6 0
      services/real-time/app.js

+ 6 - 0
services/real-time/app.js

@@ -95,6 +95,12 @@ io.configure(function () {
       const originIsValid = allowedCorsOriginsRegex.test(normalizedOrigin)
       const originIsValid = allowedCorsOriginsRegex.test(normalizedOrigin)
 
 
       if (req.headers.origin) {
       if (req.headers.origin) {
+        if (!originIsValid) {
+          logger.warn(
+            { normalizedOrigin, origin, req },
+            'Origin header does not match allowed origins'
+          )
+        }
         return originIsValid
         return originIsValid
       }
       }