[HDDS-5120] Access-Control-Allow-Origin header must be set in all the responses from http endpoints

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Abandoned
• Affects Version/s: 1.1.0
• Component/s: Security, website
• Target Version/s: 1.4.0
• Assignee: Unassigned
• Reporter: Vivek Ratnavel Subramanian
• Created: 19/Apr/21 18:51
• Updated: 04/Aug/23 07:18
• Resolved: 04/Aug/23 07:18

Description

To prevent CORS attacks, all the http endpoints exposed by Ozone should include Access-Control-Allow-Origin header in the response pointing to a trusted domain.