klinsmaya/SQLBot
1
0
Fork 0
mirror of https://gh-proxy.org/https://github.com/klinsmaya/SQLBot.git synced 2026-11-08 01:06:59 +08:00
Code Issues Packages Projects Releases Wiki Activity

fix: CORS error occurred while embedding the assistant

Browse Source
This commit is contained in:
fit2cloud-chenyw
2026-07-29 13:51:57 +08:00
committed by fit2cloud-chenyw
parent 4058ad3602
commit 2fefef0a37
1 changed files with 10 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
backend/apps/system/api/assistant.py
+10
View File
@@ -50,6 +50,16 @@ async def info(request: Request, response: Response, session: SessionDep, trans:
# 校验 target（来源域名）是否合法
target = sign_data.get("target", "")
request_origin = request.headers.get("origin") or get_origin_from_referer(request)
if not request_origin:
raise RuntimeError(trans('i18n_embedded.invalid_origin', origin=request_origin or ''))
request_origin = request_origin.rstrip('/')
if not target or target == "null":
target = request_origin
elif target != request_origin:
raise RuntimeError(trans('i18n_embedded.invalid_origin', origin=target or ''))
if not origin_match_domain(target, db_model.domain):
raise RuntimeError(trans('i18n_embedded.invalid_origin', origin=target or ''))