Explicitly allow all origins in websocket upgrader

bluesky-social · Oct 19, 2024 · a003f34 · a003f34
1 parent 485d0b4
commit a003f34
Showing 1 changed file with 6 additions and 1 deletion.
diff --git a/pkg/server/server.go b/pkg/server/server.go
@@ -28,7 +28,12 @@ type Server struct {
 	seq         int64
 }
 
-var upgrader = websocket.Upgrader{}
+var upgrader = websocket.Upgrader{
+	// Allow all origins in websocket upgrade requests
+	CheckOrigin: func(r *http.Request) bool {
+		return true
+	},
+}
 var maxConcurrentEmits = int64(100)
 var cutoverThresholdUS = int64(1_000_000)
 var tracer = otel.Tracer("jetstream-server")