From f366494febe841ee77616eb604d02a1a743a989b Mon Sep 17 00:00:00 2001 From: Justin Holmes Date: Wed, 18 Mar 2026 15:03:54 +0000 Subject: [PATCH] Fix CORS regex to allow multi-level hunter subdomains The regex \w+\d*\.hunter only matched single-level subdomains like magent1.hunter.cryptograss.live but not pickipedia.justin.hunter. Changed to [\w.-]+ to match any depth of subdomain. --- delivery-kid/pinning-service/app/config.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/delivery-kid/pinning-service/app/config.py b/delivery-kid/pinning-service/app/config.py index 9f49031..c11c1bf 100644 --- a/delivery-kid/pinning-service/app/config.py +++ b/delivery-kid/pinning-service/app/config.py @@ -47,7 +47,7 @@ class Settings(BaseSettings): "https://www.cryptograss.live", "https://pickipedia.xyz", ] - cors_origin_regex: str = r"https://\w+\d*\.hunter\.cryptograss\.live" + cors_origin_regex: str = r"https://[\w.-]+\.hunter\.cryptograss\.live" class Config: env_file = ".env"