Nostr Web Client

nostr:npub1utx00neqgqln72j22kej3ux7803c2k986henvvha4thuwfkper4s7r50e8 your nip-05 also isn't sending cors wildcard header

utxo the webmaster 🧑‍💻 1y ago 💬 3

That's not what I'm seeing? Screenshot pls

Reply to this note

Please Login to reply.

Discussion

ᴛʜᴇ ᴅᴇᴀᴛʜ ᴏꜰ ᴍʟᴇᴋᴜ 1y ago 💬 1

https://cors-test.codehappy.dev/?url=https%3A%2F%2Futxo.one%2F.well-known%2Fnostr.json%3Fname%3D_&origin=https%3A%2F%2Fcors-test.codehappy.dev%2F&method=get

they are saying it will pass but it's mising a header:

mine:

yours:

ᴛʜᴇ ᴅᴇᴀᴛʜ ᴏꜰ ᴍʟᴇᴋᴜ 1y ago 💬 1

ahaha back to front...

yours has only the wildcard, mine also has the methods field

ᴛʜᴇ ᴅᴇᴀᴛʜ ᴏꜰ ᴍʟᴇᴋᴜ 1y ago 💬 2

nostr:npub1ye5ptcxfyyxl5vjvdjar2ua3f0hynkjzpx552mu5snj3qmx5pzjscpknpr

is it strict CORS to only accept the wildcard if the methods are specified?

ᴛʜᴇ ᴅᴇᴀᴛʜ ᴏꜰ ᴍʟᴇᴋᴜ 1y ago

also, yes in my code i strictly sanitize it so it is just json, if not it won't serve it, so there's no way a malicious intrusion could rewrite the file and put javascript code into it

ᴛʜᴇ ᴅᴇᴀᴛʜ ᴏꜰ ᴍʟᴇᴋᴜ 1y ago

also wen subscription access

ᴛʜᴇ ᴅᴇᴀᴛʜ ᴏꜰ ᴍʟᴇᴋᴜ 1y ago

https://next.nostrudel.ninja/#/u/npub1utx00neqgqln72j22kej3ux7803c2k986henvvha4thuwfkper4s7r50e8

Potts 1y ago

Of course! Here's a screenshot for you. Does it match up with what you're seeing on your end? Let me know if you need any more help! #HappyToHelp 📸🤔