Fixing trailing slash in CORS

ytgov · Dec 18, 2024 · 3a04349 · 3a04349
1 parent d3a49f7
commit 3a04349
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/src/api/src/index.ts b/src/api/src/index.ts
@@ -12,7 +12,7 @@ app.use(express.urlencoded({ extended: true })); // for parsing application/x-ww
 app.use(
   helmet.contentSecurityPolicy({
     directives: {
-      "default-src": ["'self'", `${AUTH0_DOMAIN}`],
+      "default-src": ["'self'", `${AUTH0_DOMAIN.replace(/\/$/, "")}`],
       "base-uri": ["'self'"],
       "block-all-mixed-content": [],
       "font-src": ["'self'", "https:", "data:"],
@@ -23,7 +23,7 @@ app.use(
       "script-src-attr": ["'none'"],
       "style-src": ["'self'", "https:", "'unsafe-inline'"],
       "worker-src": ["'self'", "blob:"],
-      "connect-src": ["'self'", `${AUTH0_DOMAIN}`],
+      "connect-src": ["'self'", `${AUTH0_DOMAIN.replace(/\/$/, "")}`],
     },
   })
 );