Merge pull request #209 from mlibrary/wide_open

Wide open
mlibrary · Sep 23, 2024 · fcd9536 · fcd9536
2 parents 436321b + 6785397
commit fcd9536
Show file tree

Hide file tree

Showing 3 changed files with 4 additions and 9 deletions.
diff --git a/Gemfile b/Gemfile
@@ -21,8 +21,6 @@ gem "aws-sdk-s3", "~> 1.160"
 gem "content_disposition", "~> 1.0"
 gem "uppy-s3_multipart", "~> 1.2"
 
-# CORS
-gem 'rack-cors'
 
 #####################################
 # Try to work around brokenness on

diff --git a/config/application.rb b/config/application.rb
@@ -23,6 +23,10 @@
 module Dromedary
   class Application < Rails::Application
 
+    # CORS with rails running not-at-the-root turns out to be mostly broken.
+    # So we do this, which stinks.
+    config.action_controller.forgery_protection_origin_check = false
+
     config.time_zone = 'Eastern Time (US & Canada)'
 
     # Initialize configuration defaults for originally generated Rails version.

diff --git a/config/initializers/cors.rb b/config/initializers/cors.rb