Contintue to improve CORS validation #226

New issue

Open

opened 2025-04-09 13:53:55 +00:00 by alexvanin · 0 comments

alexvanin commented

2025-04-09 13:53:55 +00:00

Owner

As @nzinkevich mentioned in #225 (comment) cors.container may have plenty of invalid object formats, including AllowedOrigins with multiple wildcards. It would be nice to validate these cases even though they are partially validated in S3 gateway in PutBucketCORS handler.

As @nzinkevich mentioned in https://git.frostfs.info/TrueCloudLab/frostfs-http-gw/pulls/225#issuecomment-72612 cors.container may have plenty of invalid object formats, including `AllowedOrigins` with multiple wildcards. It would be nice to validate these cases even though they are partially validated in S3 gateway in `PutBucketCORS` handler.