CORS: change max age from 5s to 60s

This commit is contained in:
Rory&
2026-03-15 15:52:50 +01:00
parent 63effc3887
commit 4c6ca65b44

View File

@@ -25,7 +25,7 @@ export function CORS(req: Request, res: Response, next: NextFunction) {
res.set("Access-Control-Allow-Headers", req.header("Access-Control-Request-Headers") || "*");
res.set("Access-Control-Allow-Methods", req.header("Access-Control-Request-Method") || "*");
res.set("Access-Control-Allow-Origin", req.header("Origin") ?? "*");
res.set("Access-Control-Max-Age", "5"); // dont make it too long so we can change it dynamically
res.set("Access-Control-Max-Age", "60"); // dont make it too long so we can change it dynamically
// TODO: use better CSP
res.set(
"Content-security-policy",