Disallow all origins for WebSocket requests

This commit is contained in:
Charles Gould 2017-02-07 18:16:50 -05:00
parent a016b73c9b
commit 79c0e8452f

View File

@ -32,8 +32,7 @@ public class WebSocketConfig extends AbstractWebSocketMessageBrokerConfigurer {
@Override @Override
public void registerStompEndpoints(StompEndpointRegistry registry) { public void registerStompEndpoints(StompEndpointRegistry registry) {
// Allow all origins: for JSFiddle, lol registry.addEndpoint("/stomp").withSockJS();
registry.addEndpoint("/stomp").setAllowedOrigins("*").withSockJS();
} }
} }