mirror of
https://github.com/d0zingcat/cors-anywhere.git
synced 2026-05-13 23:16:51 +00:00
6c4234f2b3
- Add checkRateLimit option to the API. - Extend the default server.js with environment variables CORSANYWHERE_WHITELIST (re-using originWhitelist) and CORSANYWHERE_RATELIMIT (using the new checkRateLimit option) to make it easy to enforce usage limits. - Document that Heroku doesn't want open proxies.
38 lines
1.5 KiB
JavaScript
38 lines
1.5 KiB
JavaScript
// Heroku defines the environment variable PORT, and requires the binding address to be 0.0.0.0
|
|
var host = process.env.PORT ? '0.0.0.0' : '127.0.0.1';
|
|
var port = process.env.PORT || 8080;
|
|
|
|
// Grab the blacklist from the command-line so that we can update the blacklist without deploying
|
|
// again. CORS Anywhere is open by design, and this blacklist is not used, except for countering
|
|
// immediate abuse (e.g. denial of service). If you want to block all origins except for some,
|
|
// use originWhitelist instead.
|
|
var originBlacklist = (process.env.CORSANYWHERE_BLACKLIST || '').split(',');
|
|
var originWhitelist = (process.env.CORSANYWHERE_WHITELIST || '').split(',');
|
|
|
|
// Set up rate-limiting to avoid abuse of the public CORS Anywhere server.
|
|
var checkRateLimit = require('./lib/rate-limit')(process.env.CORSANYWHERE_RATELIMIT);
|
|
|
|
var cors_proxy = require('./lib/cors-anywhere');
|
|
cors_proxy.createServer({
|
|
originBlacklist: originBlacklist,
|
|
originWhitelist: originWhitelist,
|
|
requireHeader: ['origin', 'x-requested-with'],
|
|
checkRateLimit: checkRateLimit,
|
|
removeHeaders: [
|
|
'cookie',
|
|
'cookie2',
|
|
// Strip Heroku-specific headers
|
|
'x-heroku-queue-wait-time',
|
|
'x-heroku-queue-depth',
|
|
'x-heroku-dynos-in-use',
|
|
'x-request-start',
|
|
],
|
|
redirectSameOrigin: true,
|
|
httpProxyOptions: {
|
|
// Do not add X-Forwarded-For, etc. headers, because Heroku already adds it.
|
|
xfwd: false,
|
|
},
|
|
}).listen(port, host, function() {
|
|
console.log('Running CORS Anywhere on ' + host + ':' + port);
|
|
});
|