Closed Bug 1123728 Opened 6 years ago Closed 6 years ago
Add open CORS header when in DEBUG mode
39 bytes, text/x-review-board-request
For testing Bugzilla interaction with Review Board, we need a CORS header in the latter, since Bugzilla and Review Board are different hosts.
/r/2715 - Bug 1123728 - rbbz: When in DEBUG mode, add an open CORS header. Pull down this commit: hg pull review -r 6a6386b2e3ab8e41ed16bf31a702a84d53496cc7
https://reviewboard.mozilla.org/r/2713/#review1809 My super quick look sais this is fine. I haven't thought deeply about the security implications since we're only doing this with DEBUG True. ::: pylib/rbbz/rbbz/middleware.py (Diff revision 1) > + if settings.DEBUG: Are we running with settings.DEBUG = True on reviewboard-dev? Are we cool with having this header on there?
Attachment #8551845 - Flags: review?(smacleod) → review+
I don't think we are, but this should be fine anyway even if it is. http://hg.mozilla.org/hgcustom/version-control-tools/rev/c672af88ed12
Status: ASSIGNED → RESOLVED
Closed: 6 years ago
Resolution: --- → FIXED
You need to log in before you can comment on or make changes to this bug.