Browse Source

Improve allow origin implementation

Maurits van der Schee 8 years ago
parent
commit
1c8e2cd783
1 changed files with 3 additions and 5 deletions
  1. 3
    5
      api.php

+ 3
- 5
api.php View File

@@ -2119,13 +2119,11 @@ class PHP_CRUD_API {
2119 2119
 	}
2120 2120
 
2121 2121
 	protected function allowOrigin($origin,$allowOrigins) {
2122
-		$allowedOrigins = explode(',',$allowOrigins);
2123
-		if ($allowedOrigins[0]=='*') {
2122
+		if ($allowOrigins=='*') {
2124 2123
 			header('Access-Control-Allow-Origin: *');
2125 2124
 		} else {
2126
-			if ($origin) foreach ($allowedOrigins as $allowedOrigin) {
2127
-				$allowedOrigin = str_replace('\*','.*',preg_quote(strtolower(trim($allowedOrigin))));
2128
-				if (preg_match('/^'.$allowedOrigin.'$/',$origin)) { 
2125
+			if ($origin) foreach (explode(',',$allowOrigins) as $o) {
2126
+				if (preg_match('/^'.str_replace('\*','.*',preg_quote(strtolower(trim($o)))).'$/',$origin)) { 
2129 2127
 					header('Access-Control-Allow-Origin: '.$origin);
2130 2128
 					break;
2131 2129
 				}

Loading…
Cancel
Save