feat: Only allow requests from HTTPs

2026-01-10 21:36:18 +00:00 · 2024-10-02 00:42:07 +02:00
parent 87174eadd6
commit a6d7da1205
1 changed files with 1 additions and 4 deletions
--- a/src/main/kotlin/app/revanced/api/configuration/HTTP.kt
+++ b/src/main/kotlin/app/revanced/api/configuration/HTTP.kt
@@ -22,10 +22,7 @@ fun Application.configureHTTP() {
        allowCredentials = true

        configurationRepository.corsAllowedHosts.forEach { host ->
-            allowHost(
-                host = host,
-                schemes = listOf("http", "https"),
-            )
+            allowHost(host = host, schemes = listOf("https"))
        }
    }