From a63da82b858101d12582e09d90c7d9b589c1231c Mon Sep 17 00:00:00 2001
From: silverpill <silverpill@firemail.cc>
Date: Tue, 8 Feb 2022 13:16:38 +0000
Subject: [PATCH] Allow cross-origin requests from localhost in production
 environment

https://codeberg.org/silverpill/mitra/issues/5
---
 src/main.rs | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/src/main.rs b/src/main.rs
index 3b8db75..cb45f01 100644
--- a/src/main.rs
+++ b/src/main.rs
@@ -60,7 +60,11 @@ async fn main() -> std::io::Result<()> {
             },
             Environment::Production => {
                 let allowed_origin = config.instance_url();
-                Cors::default().allowed_origin(&allowed_origin)
+                Cors::default()
+                    .allowed_origin(&allowed_origin)
+                    .allowed_origin_fn(|origin, _req_head| {
+                        origin.as_bytes().starts_with(b"http://localhost:")
+                    })
                     .allow_any_method()
                     .allow_any_header()
             },