limit CORS only to /api/*

2024-04-26 16:35:45 +05:30 · 2024-04-26 16:35:45 +05:30 · cb0cb654c8
parent 40fbc7b430
commit cb0cb654c8
1 changed files with 1 additions and 1 deletions
--- a/web/config/initializers/cors.rb
+++ b/web/config/initializers/cors.rb
@ -2,7 +2,7 @@ Rails.application.config.middleware.insert_before 0, Rack::Cors do
  allow do
    origins Rails.configuration.spa_origin

-    resource '*',
+    resource '/api/*',
      headers: :any,
      methods: [:get, :post, :delete, :options],
      credentials: true