yogsototh/her.esy.fun
1
0
Fork 0
Code Issues Pull requests Packages Projects Releases Wiki Activity

last minute update before deploying

Browse source
This commit is contained in:
Yann Esposito (Yogsototh) 2024-03-08 11:26:52 +01:00
parent 92d7c0e6bd
commit 434bdbea2c
Signed by untrusted user who does not match committer: yogsototh
GPG key ID: 7B19A4C650D59646
1 changed files with 13 additions and 8 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

21
src/posts/0025-a-quick-cors-proxy-in-a-few-lines-of-clojure/index.org
View file

@ -8,17 +8,22 @@
#+options: auto-id:t #+options: auto-id:t
#+startup: showeverything #+startup: showeverything
I use a HTML file from one of my local directory as homepage. When I open a new tab in my browser I see my hand-made starter homepage.
This HTML file contains in a single one page view, all links I generally want to This is a single HTML file on my computer.
jump to. Not a hosted website.
This homepage is really useful and along the years I added some functionalities:
- organized links for my most frequently used websites
- direct text input to some specialized search engines
- work related links to a lot of different places, I see the APIs, the version
number of the deployed nodes, etc…
- my daily work tasks are displayed there (from org-mode calendar to this page)
One of the section of links in this homepage contain a few website I host. One of the section of links in this homepage contain a few website I host.
And I wanted to query these websites to make a healthcheck from my file. And I wanted to query these websites to make a health check from my file.
It turns out that you cannot easily make an HTTP call to any external website It turns out that you cannot easily make an HTTP call to any external website
from a `file://` in your Browser as your are almost immediately blocked by CORS. from a =file://= in your Browser as your are almost immediately blocked by /CORS/.
I don't want to explain how CORS are working, most people don't get it correctly I don't want to explain how /CORS/ are working.
anyway.
The important point is that it is a security measure that is *very easy* to circumvent. The important point is that it is a security measure that is *very easy* to circumvent.
Here is how to do it: Here is how to do it:
@ -72,7 +77,7 @@ Here is the code in a few lines of Clojure:
#+end_src #+end_src
And that's it, this is a whole web application that will proxy any call to a And that's it, this is a whole web application that will proxy any call to a
website that do not allow you to call from some origin (like my `file://`) and website that do not allow you to call from some origin (like my =file://=) and
will make it work anyway. will make it work anyway.
If you feel that using too many libraries is cheating, here is the actual almost full If you feel that using too many libraries is cheating, here is the actual almost full