From 7cd5b15c9bf92e1d26d757fad53342a9e86f7221 Mon Sep 17 00:00:00 2001 From: LTbinglingfeng Date: Sat, 13 Jun 2026 05:59:18 +0800 Subject: [PATCH] fix: precompute exposed CORS headers --- internal/api/server.go | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/internal/api/server.go b/internal/api/server.go index b46fb421..9b414d7c 100644 --- a/internal/api/server.go +++ b/internal/api/server.go @@ -61,6 +61,8 @@ var corsExposedResponseHeaders = []string{ "X-SERVER-BUILD-DATE", } +var corsExposedResponseHeadersJoined = strings.Join(corsExposedResponseHeaders, ", ") + type serverOptionConfig struct { extraMiddleware []gin.HandlerFunc engineConfigurator func(*gin.Engine) @@ -1477,7 +1479,7 @@ func corsMiddleware() gin.HandlerFunc { c.Header("Access-Control-Allow-Origin", "*") c.Header("Access-Control-Allow-Methods", "GET, POST, PUT, PATCH, DELETE, OPTIONS") c.Header("Access-Control-Allow-Headers", "*") - c.Header("Access-Control-Expose-Headers", strings.Join(corsExposedResponseHeaders, ", ")) + c.Header("Access-Control-Expose-Headers", corsExposedResponseHeadersJoined) if c.Request.Method == "OPTIONS" { c.AbortWithStatus(http.StatusNoContent)