handle null origin in cors handler (#42)

markelliot · Feb 23, 2022 · 2dd00f9 · 2dd00f9
1 parent 83f1142
commit 2dd00f9
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/barista/src/main/java/com/markelliot/barista/handlers/CorsHandler.java b/barista/src/main/java/com/markelliot/barista/handlers/CorsHandler.java
@@ -46,7 +46,7 @@ public record CorsHandler(Set<String> allowedOrigins, HttpHandler delegate) impl
     @Override
     public void handleRequest(HttpServerExchange exchange) throws Exception {
         String origin = exchange.getRequestHeaders().getFirst(Headers.ORIGIN);
-        if (!allowedOrigins.contains(origin)) {
+        if (origin != null && !allowedOrigins.contains(origin)) {
             exchange.setStatusCode(403)
                     .getResponseSender()
                     .send("Origin '" + origin + "' not allowed.");