[asterisk-dev] [Code Review] 2667: Add configuration for CORS allowed origins.

[Jason Parker]

-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviewboard.asterisk.org/r/2667/
-----------------------------------------------------------

Review request for Asterisk Developers and David Lee.


Bugs: ASTERISK-21278
    https://issues.asterisk.org/jira/browse/ASTERISK-21278


Repository: Asterisk


Description
-------

Add configuration of allowed origins and validation of origins against that list.


Diffs
-----

  /trunk/res/res_stasis_http.c 393909 
  /trunk/res/stasis_http/config.c 393909 
  /trunk/res/stasis_http/internal.h 393909 

Diff: https://reviewboard.asterisk.org/r/2667/diff/


Testing
-------

Multiple (comma-delimited) values work, * works (even if somebody is silly, and puts it in a list), empty config option fails as expected (should it default to *?  Insecure by default vs more effort to configure).


Thanks,

Jason Parker

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.digium.com/pipermail/asterisk-dev/attachments/20130709/47d448ce/attachment.htm>