Comments (7)
HI.
I'm very sorry for the long period of inactivity.
CORS headers were added to the latest release. You need to set IMGPROXY_ALLOW_ORIGIN
to enable them. See README.
from imgproxy.
@DarthSim is it possible to allow multiple domains? I have two domains, one also that supports subdomains, using the image proxy, I'de like to restrict access only from these?
from imgproxy.
Following up on Matt's request for the ability to allow multiple domains in the IMGPROXY_ALLOW_ORIGIN
if possible. Currently have to set to *
to suit my needs but would like to restrict!
from imgproxy.
Here's the thing: Access-Control-Allow-Origin
does not support multiple values and masking. Usually, applications respond with dynamic Access-Control-Allow-Origin
that depends on the request origin. But in the case of imgproxy where you put a CDN or a caching server in front, this won't work properly.
from imgproxy.
@DarthSim Maybe we could check if the Host
or X-Forwarded-Host
header is in the IMGPROXY_ALLOW_ORIGIN
list and return it if there is a match?
from imgproxy.
@thibauds That's exactly what I'm talking about here:
Usually, applications respond with dynamic Access-Control-Allow-Origin that depends on the request origin. But in the case of imgproxy where you put a CDN or a caching server in front, this won't work properly.
from imgproxy.
But in the case of imgproxy where you put a CDN or a caching server in front, this won't work properly.
If the CDN accepts a Vary: Accept, Origin
header having dynamic CORS headers could work right?
from imgproxy.
Related Issues (20)
- Asking for Help: Nginx Configuration for Rewrites HOT 2
- Extract 9:16 thumbs from video & using VTT seems to lose the resize HOT 12
- ICO files failing with "Cant load from ICO" error HOT 7
- Base64 encoding of local url doesn't work HOT 1
- Resizing with "fit" mode leads to blurry images in some cases HOT 2
- invalid TIFF format: image dimensions are not specified HOT 6
- Support EPS files HOT 1
- "is not a video" error when trying to source PSD file HOT 2
- How to get width and height of original img?
- Feature request: support using data urls as watermarkurl
- Feature request: Gradient improvements HOT 5
- Text is illegible when a PDF has non-embedded CID TrueType and no character map HOT 4
- Feature Request: Option to limit max dimension of output image HOT 3
- Error: heifsave: image too large HOT 2
- Using imgproxy via Proxy for Amazon S3 HOT 3
- Option to report source image errors HOT 2
- Style transformation for SVG broken since 3.23 HOT 3
- Error: SVG detection does not work when it uses namespaces HOT 2
- Can't download source image: invalid JPEG format: missing SOF marker HOT 2
- ERROR png2vips: unable to read source source HOT 2
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from imgproxy.