fix: change CORS settings to apply only to RTE and specific domain

2024-03-26 14:03:50 +01:00
parent b35a32ab82
commit 8cad5ea290
1 changed files with 2 additions and 2 deletions
--- a/netlify.toml
+++ b/netlify.toml
@@ -1,8 +1,8 @@
 [[headers]]
-  for = "/*"
+  for = "/build/rte/csiv.js"

  [headers.values]
-    Access-Control-Allow-Origin = "https://*.contentstack.com"
+    Access-Control-Allow-Origin = "https://eu-rte-extension.contentstack.com"
    Access-Control-Allow-Methods = "GET, HEAD"
    Access-Control-Allow-Headers = "*"