From 8d0265d0febbebcf10607f8fe1860ee50d405f32 Mon Sep 17 00:00:00 2001
From: Jonatan Nilsson <jonatan@nilsson.is>
Date: Wed, 15 Nov 2023 10:07:20 +0000
Subject: [PATCH] cors: Fix cors to allow any if site allows cors

---
 api/media/routes.mjs | 2 +-
 package.json         | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/api/media/routes.mjs b/api/media/routes.mjs
index 62a67ca..fb2fbce 100644
--- a/api/media/routes.mjs
+++ b/api/media/routes.mjs
@@ -30,7 +30,7 @@ export default class MediaRoutes {
     server.flaska.post('/media/resize', [server.queryHandler()], this.resize.bind(this))
     server.flaska.post('/media/resize/:filename', [server.queryHandler(), server.jsonHandler()], this.resizeExisting.bind(this))
     server.flaska.delete('/media/:filename', [server.queryHandler()], this.remove.bind(this))
-    server.flaska.options('/::path', [server.queryHandler(), this.security.verifyCorsEnabled], CorsHandler({}))
+    server.flaska.options('/::path', [server.queryHandler(), this.security.verifyCorsEnabled], CorsHandler({ allowedOrigins: ['*'] }))
   }
 
   init(server) {
diff --git a/package.json b/package.json
index 2c92612..56df2a7 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "storage-upload",
-  "version": "2.2.8",
+  "version": "2.2.9",
   "description": "Micro service for uploading and image resizing files to a storage server.",
   "main": "index.js",
   "scripts": {
@@ -42,7 +42,7 @@
   },
   "homepage": "https://github.com/nfp-projects/storage-upload#readme",
   "dependencies": {
-    "flaska": "^1.2.3",
+    "flaska": "^1.3.5",
     "formidable": "^1.2.2",
     "nconf-lite": "^2.0.0",
     "sharp": "^0.30.3"