Commit cdbcca9f authored by Karamel's avatar Karamel
Browse files

Fix allowed_origin default value.

parent 5dee7954
......@@ -54,10 +54,16 @@ database/inifile/path = "auth"
jwt_timeout = 600
; Set this to a superstrong password
jwt_secret = "<Change me>"
; Uncomment to allow calls from everywhere, not recommended
; Allowed origins, required for jsadmin for cross-site scripting.
; Default is "", which disallows cross-site scripting.
; Uncomment to allow undefined domains to connect (like file://). Not recommended.
; allowed_origin = "null"
; Uncomment to allow calls from everywhere. Not recommended.
;allowed_origin = *
; Uncomment to allow calls from a whitelist
; Uncomment to allow calls from a whitelist.
; Set multiple entries for multiple domains.
;allowed_origin[] = http://<domain>
;allowed_origin[] = http://<other domain>
; Thumbnail compression
;----------------------
......
......@@ -33,6 +33,7 @@ class AppContext {
const MODE_REGULAR = 0;
const MODE_FISCALMIRROR = 1;
private $allowedOrigin;
private $jwtSecret;
private $jwtTimeout;
private $identModule;
......@@ -50,6 +51,7 @@ class AppContext {
$this->jwtTimeout = 600;
$this->logger = new Logger('pasteque');
$this->isDebugMode = false;
$this->allowedOrigin = '';
$this->serverMode = static::MODE_REGULAR;
}
......
Supports Markdown
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment