feat: add support for protocol (http or https) in CORS origins

center-for-threat-informed-defense · Dec 30, 2024 · e154a89 · e154a89
1 parent 86222fa
commit e154a89
Showing 1 changed file with 3 additions and 3 deletions.
diff --git a/app/config/config.js b/app/config/config.js
@@ -101,11 +101,11 @@ function validateDomains(value) {
         ? value
         : value.split(',').map(origin => origin.trim());
 
-    // Regex to validate FQDNs
-    const fqdnRegex = /^(?!:\/\/)([a-zA-Z0-9-_]+\.)+[a-zA-Z]{2,}$/;
+    // Regex to validate FQDNs with or without protocols
+    const originRegex = /^(https?:\/\/)?([a-zA-Z0-9-]+\.)+[a-zA-Z]{2,}$/;
 
     origins.forEach(origin => {
-        if (!fqdnRegex.test(origin)) {
+        if (!originRegex.test(origin)) {
             throw new Error(`Invalid domain: ${origin}`);
         }
     });