feat: Only allow requests from HTTPs

2025-04-29 22:24:31 +02:00 · 2024-10-02 00:42:07 +02:00 · 2024-10-02 00:42:07 +02:00 · a6d7da1205
commit a6d7da1205
parent 87174eadd6
1 changed files with 1 additions and 4 deletions
--- a/src/main/kotlin/app/revanced/api/configuration/HTTP.kt
+++ b/src/main/kotlin/app/revanced/api/configuration/HTTP.kt
@ -22,10 +22,7 @@ fun Application.configureHTTP() {
        allowCredentials = true

        configurationRepository.corsAllowedHosts.forEach { host ->
-            allowHost(
-                host = host,
-                schemes = listOf("http", "https"),
-            )
+            allowHost(host = host, schemes = listOf("https"))
        }
    }