From fde056a62f427e560f4d8753fa433b857fdd0702 Mon Sep 17 00:00:00 2001 From: Ruben Fiszel Date: Tue, 5 Dec 2023 12:15:21 +0100 Subject: [PATCH] fix: add access-control-allow-origin to static assets --- backend/windmill-api/src/static_assets.rs | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/backend/windmill-api/src/static_assets.rs b/backend/windmill-api/src/static_assets.rs index ce9131ca8e..272488f9c9 100644 --- a/backend/windmill-api/src/static_assets.rs +++ b/backend/windmill-api/src/static_assets.rs @@ -47,7 +47,9 @@ fn serve_path(path: &str) -> Response { Some(content) => { let body = body::boxed(body::Full::from(content.data)); let mime = mime_guess::from_path(path).first_or_octet_stream(); - let mut res = Response::builder().header(header::CONTENT_TYPE, mime.as_ref()); + let mut res = Response::builder() + .header(header::CONTENT_TYPE, mime.as_ref()) + .header(header::ACCESS_CONTROL_ALLOW_ORIGIN, "*"); if mime.as_ref() == mime::APPLICATION_JAVASCRIPT { res = res.header(header::CACHE_CONTROL, "max-age=31536000"); } else if (mime.type_(), mime.subtype()) == (mime::TEXT, mime::CSS) {