mirror of
https://github.com/pi-hole/web.git
synced 2026-02-22 18:55:22 +00:00
Previously had been checking Origin AND Host header, but we should not check Host header... Removed Host check and only check if Origin header is set, because otherwise CORS doesn't apply (could be a same-origin request).