Skip to content

Console silently converts CORS origins to regex format in application edit section #4781

Description

@ThaminduDilshan

Description

From the /server-config/cors API, origins like below are rejected.

https://example.com/path
https://example.com?x=1
https://example.com#frag

However, when the same origins are added from the console, console converts them to regexes (like {"regex":"https://example.com/path"}) and send them in the PUT request, which is getting successful. This behavior obscures user intent and can introduce failures where strict origin matching is required.

Related: #4721

Steps to Reproduce

  1. Login to console
  2. Create an application
  3. Try to configure allowed origins

Version

v1.0.0-beta2

Environment Details (with versions)

No response

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

Type

Projects

Milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions