Disallow all origins for WebSocket requests

This commit is contained in:
Charles Gould 2017-02-07 18:16:50 -05:00
parent a016b73c9b
commit 79c0e8452f

View File

@ -32,8 +32,7 @@ public class WebSocketConfig extends AbstractWebSocketMessageBrokerConfigurer {
@Override
public void registerStompEndpoints(StompEndpointRegistry registry) {
// Allow all origins: for JSFiddle, lol
registry.addEndpoint("/stomp").setAllowedOrigins("*").withSockJS();
registry.addEndpoint("/stomp").withSockJS();
}
}