summary refs log tree commit diff
diff options
context:
space:
mode:
authorRory& <root@rory.gay>2026-03-15 15:52:50 +0100
committerRory& <root@rory.gay>2026-03-15 15:52:50 +0100
commit4c6ca65b441d972fe1ff6dc97d5fbb18080594e4 (patch)
tree417470068d5d71b4c5423ff1eb630f7af8952111
parentAdded two new configuration options for SMTP: "starttls" and (diff)
downloadserver-ts-4c6ca65b441d972fe1ff6dc97d5fbb18080594e4.tar.xz
CORS: change max age from 5s to 60s
-rw-r--r--src/api/middlewares/CORS.ts2
1 files changed, 1 insertions, 1 deletions
diff --git a/src/api/middlewares/CORS.ts b/src/api/middlewares/CORS.ts

index 23186250..7e2a3873 100644 --- a/src/api/middlewares/CORS.ts +++ b/src/api/middlewares/CORS.ts
@@ -25,7 +25,7 @@ export function CORS(req: Request, res: Response, next: NextFunction) { res.set("Access-Control-Allow-Headers", req.header("Access-Control-Request-Headers") || "*"); res.set("Access-Control-Allow-Methods", req.header("Access-Control-Request-Method") || "*"); res.set("Access-Control-Allow-Origin", req.header("Origin") ?? "*"); - res.set("Access-Control-Max-Age", "5"); // dont make it too long so we can change it dynamically + res.set("Access-Control-Max-Age", "60"); // dont make it too long so we can change it dynamically // TODO: use better CSP res.set( "Content-security-policy",