Fixing double CORS header issue

michaeldsmith · Aug 17, 2022 · 5e46e97 · 5e46e97
1 parent e72caa7
commit 5e46e97
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 3 deletions.
diff --git a/image_server/Dockerfile b/image_server/Dockerfile
@@ -82,7 +82,6 @@ RUN chown -R root:apprun /var/www/iipsrv/cgi-bin/* && chmod 774 /var/www/iipsrv/
 # ---- For split packages, cut here ----
 
 ENV ALLOW_UPSCALING 0
-ENV CORS "*"
 ENV LOGFILE "/dev/stdout"
 ENV URI_MAP "iiif=>IIIF"
 ENV MAX_IMAGE_CACHE_SIZE "0"

diff --git a/image_server/nginx.conf b/image_server/nginx.conf
@@ -25,8 +25,6 @@ http {
 
         include /etc/nginx/fastcgi_params;
 
-        add_header 'Access-Control-Allow-Origin' '*';
-
         location / {
             fastcgi_pass    localhost:9000;
             fastcgi_param   PATH_INFO $fastcgi_script_name;
@@ -37,6 +35,8 @@ http {
             fastcgi_param   SERVER_PROTOCOL $server_protocol;
             fastcgi_param   REQUEST_URI $request_uri;
             fastcgi_param   HTTPS $https if_not_empty;
+            proxy_hide_header Access-Control-Allow-Origin;
+            add_header Access-Control-Allow-Origin '*';
         }
     }