Jeremy Lin 7d0e234b34 CORS fixes
* The Safari extension apparently now uses the origin `file://` and expects
  that to be returned (see bitwarden/browser#1311, bitwarden/server#800).

* The `Access-Control-Allow-Origin` header was reflecting the value of the
  `Origin` header without checking whether the origin was actually allowed.
  This effectively allows any origin to interact with the server, which
  defeats the purpose of CORS.
2021-03-07 00:35:08 -08:00
..
2021-02-26 21:48:01 -08:00
2021-02-03 23:47:48 +01:00
2021-03-06 22:04:01 +01:00
2021-02-28 01:45:05 -08:00
2021-03-07 00:35:08 -08:00