PipedreamHQ / PipedreamHQ/pipedream

[FEATURE] I want to limit the domains returned in the Access-Control-Allow-Origin header for a given HTTP endpoint

Open
#352 1 comment 2 reactions 0 assignees View on GitHub
enhancement tracked internally triaged
Dominant language
JavaScript
Stars
11.7k
Forks
5.8k
Avg merge
3d 10h
Merged PRs (30d)
102

Description

Currently, Pipedream returns the following headers in response to requests to HTTP endpoints:

```
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE
```

I have no control over the Origin returned in the header, so I can't prevent browser-initiated requests from reaching my endpoint from other domains. I'd ideally like to control the value of the header returned for my endpoint.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.