Disable CORS when running in --dev (#2291)

* Disable cors in dev mode,

* Whitelist substrate-ui.

* Fix build.

* Update docs.
This commit is contained in:
Tomasz Drwięga
2019-04-16 12:57:51 +02:00
committed by Bastian Köcher
parent 47c1b4b26e
commit a6cbc965a0
2 changed files with 14 additions and 6 deletions
+12 -5
View File
@@ -475,11 +475,18 @@ where
config.rpc_ws = Some(
parse_address(&format!("{}:{}", ws_interface, 9944), cli.ws_port)?
);
config.rpc_cors = cli.rpc_cors.unwrap_or_else(|| Some(vec![
"http://localhost:*".into(),
"https://localhost:*".into(),
"https://polkadot.js.org".into()
]));
let is_dev = cli.shared_params.dev;
config.rpc_cors = cli.rpc_cors.unwrap_or_else(|| if is_dev {
log::warn!("Running in --dev mode, RPC CORS has been disabled.");
None
} else {
Some(vec![
"http://localhost:*".into(),
"https://localhost:*".into(),
"https://polkadot.js.org".into(),
"https://substrate-ui.parity.io".into(),
])
});
// Override telemetry
if cli.no_telemetry {