DependencyTrack / DependencyTrack/dependency-track

Disabling CORS is not applied when configured in docker-compose.yml

Open
#1,522 7 comments 0 reactions 0 assignees View on GitHub
in triage
Dominant language
Java
Stars
4.2k
Forks
811
Avg merge
8h 39m
Merged PRs (30d)
237

Description

The defect may already be reported! Please search for the defect before creating one.

### Current Behavior:
CORS doesn't look like it can be disabled

### Steps to Reproduce:
In the docker-compose.yaml
set
# Optional LDAP Properties
- ALPINE_LDAP_ENABLED=false

browse to http://dependencytrack.domain.com

### Expected Behavior:
browse to http://dependencytrack.domain.com with CORS disabled successfully

### Environment:

- Dependency-Track Version: 4.4
- Distribution: Docker
- BOM Format & Version: N/A
- Database Server: PostgreSQL
- Browser: Firefox (latest), Chrome (latest), Safari (latest), Edge (latest)

### Additional Details:

[Error] Unhandled Promise Rejection: TypeError: undefined is not an object (evaluating 'i.generateKey')
promiseEmptyOnRejected (content-script.js:75:780)
promiseReactionJob
[Error] Origin http://dependencytrack.domain.com:8080 is not allowed by Access-Control-Allow-Origin. Status code: 200
[Error] XMLHttpRequest cannot load http://dependencytrack.domain.com:8081/api/version due to access control checks.
[Error] Failed to load resource: Origin http://dependencytrack.domain.com:8080 is not allowed by Access-Control-Allow-Origin. Status code: 200 (version, line 0)
[Error] Unhandled Promise Rejection: Error: Network Error
promiseEmptyOnRejected (chunk-vendors.33718c9a.js:46:8320)
promiseReactionJob

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.