Allow cross origin header

[thenoobtester]

Allow cross origin header

[troglobit]

You can have a look at send_mime(), it is called from httpd_start_request(). Good luck!

merecat/src/libhttpd.c

Lines 753 to 755 in 606774e

	static void
	send_mime(struct http_conn *hc, int status, char *title, char *encodings,
	const char *extraheads, const char *type, off_t length, time_t mod)

[thenoobtester]

As a quick follow-up. I added the following line to the send_mime() function from the merecat/src/libhttpd.c file you mentionned:

"Access-Control-Allow-Origin: *\r\n",

Before:

			 "Last-Modified: %s\r\n"
			 "Accept-Ranges: bytes\r\n",
			 hc->protocol, status, title, nowbuf, EXPOSED_SERVER_SOFTWARE, modbuf);

After:

			 "Last-Modified: %s\r\n"
			 "Accept-Ranges: bytes\r\n"
			 "Access-Control-Allow-Origin: *\r\n",
			 hc->protocol, status, title, nowbuf, EXPOSED_SERVER_SOFTWARE, modbuf);

It now adds the Access-Control-Allow-Origin: * header to every response, so ideally I would add it as a configurable parameter with a regex to target specific files (like they did here on another project monkey/monkey@d4d4dab) and choose if I allow any origin with * or be more specific. But that's for later as I'm no pro programmer and C is hard.

Thank you for your help and directing me in the right direction.

[thenoobtester]

Thank you for the quick response. To make sure i understand your response, do you mean it cannot be done out-of-the-box and that I should modify the source code? If that's the case then I'm afraid it's out of my skills :( I was hoping there would be an option or something.

Thank you

[troglobit]

Correct, you need to patch the code.