@@ 38-45 (lines=8) @@ | ||
35 | ||
36 | $origin = $request->headers->get('Origin', ''); |
|
37 | $host = $this->parseUrl($origin); |
|
38 | if (empty($host)) { |
|
39 | $this->logRequest('Origin is invalid', [ |
|
40 | 'origin' => $origin, |
|
41 | 'parsed' => $host, |
|
42 | ]); |
|
43 | ||
44 | return $this->response($request, 'Origin is invalid', Response::HTTP_BAD_REQUEST); |
|
45 | } |
|
46 | ||
47 | $allowedOrigins = config('lodash.cors.allow_origins', []); |
|
48 | $currentApp = $this->parseUrl((string) config('app.url', '')); |
|
@@ 61-68 (lines=8) @@ | ||
58 | } |
|
59 | } |
|
60 | ||
61 | if (! $found) { |
|
62 | $this->logRequest('Origin is not allowed', [ |
|
63 | 'origin' => $origin, |
|
64 | 'parsed' => $host, |
|
65 | ]); |
|
66 | ||
67 | return $this->response($request, 'Origin is not allowed', Response::HTTP_METHOD_NOT_ALLOWED); |
|
68 | } |
|
69 | ||
70 | if ($request->method() === Request::METHOD_OPTIONS) { |
|
71 | $allowedHeaders = config('lodash.cors.allow_headers', []); |