tree 1827f8aac2a2d52d32b4efacdb6dc7a0042a261a
parent 10d86ba398a63677bbf9802594c040f237672cc2
author Saša Živkov <sasa.zivkov@sap.com> 1724938140 +0200
committer Saša Živkov <sasa.zivkov@sap.com> 1725631574 +0200

Don't allow CORS for /plugins/[static/Documentation]/* by default

There was a bug in the HttpPluginServlet.isOriginAllowed method which
enabled CORS for static and documentation resources of a plugin by
default when site.allowOriginRegex was unset.

Bug: Issue 362780339
Release-Notes: Don't allow CORS for plugin's static/doc resources by default
Change-Id: I4174f40daa59ab1fdd086a94648ec2d8dd4ce4af