mirrors/zotero
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages 1 Wiki Activity Actions

Allow browser-based access to connector server ping page

Browse source
This commit is contained in:
Dan Stillman 2019-07-15 10:06:42 -04:00
parent 1cd4e50b59
commit 7b9d404c42
1 changed files with 4 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
chrome/content/zotero/xpcom/server.js
View file

@ -423,6 +423,9 @@ Zotero.Server.DataListener.prototype._processEndpoint = Zotero.Promise.coroutine
// don't come from the connector or include Zotero-Allowed-Request // don't come from the connector or include Zotero-Allowed-Request
// //
// [1] https://developer.mozilla.org/en-US/docs/Web/HTTP/CORS#Simple_requests // [1] https://developer.mozilla.org/en-US/docs/Web/HTTP/CORS#Simple_requests
var whitelistedEndpoints = [
'/connector/ping'
];
var simpleRequestContentTypes = [ var simpleRequestContentTypes = [
'application/x-www-form-urlencoded', 'application/x-www-form-urlencoded',
'multipart/form-data', 'multipart/form-data',
@ -438,6 +441,7 @@ Zotero.Server.DataListener.prototype._processEndpoint = Zotero.Promise.coroutine
&& (!endpoint.supportedDataTypes && (!endpoint.supportedDataTypes
|| endpoint.supportedDataTypes == '*' || endpoint.supportedDataTypes == '*'
|| endpoint.supportedDataTypes.some(type => simpleRequestContentTypes.includes(type))) || endpoint.supportedDataTypes.some(type => simpleRequestContentTypes.includes(type)))
&& !whitelistedEndpoints.includes(this.pathname)
// Ignore test endpoints // Ignore test endpoints
&& !this.pathname.startsWith('/test/') && !this.pathname.startsWith('/test/')
// Ignore content types that trigger preflight requests // Ignore content types that trigger preflight requests