PipedreamHQ / PipedreamHQ/pipedream
[FEATURE] I want to limit the domains returned in the Access-Control-Allow-Origin header for a given HTTP endpoint
Open
enhancement
tracked internally
triaged
- Dominant language
- JavaScript
- Stars
- 11.7k
- Forks
- 5.8k
- Avg merge
- 3d 10h
- Merged PRs (30d)
- 102
Description
Currently, Pipedream returns the following headers in response to requests to HTTP endpoints:
```
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE
```
I have no control over the Origin returned in the header, so I can't prevent browser-initiated requests from reaching my endpoint from other domains. I'd ideally like to control the value of the header returned for my endpoint.
Contributor guide
Assessment
This issue has not been assessed yet.