deepseek
beaf0e1f37
- 134-tool registry with programmatic SEO (unique titles/H1/descriptions, JSON-LD graphs, sitemap index, canonical 301 enforcement via required filter) - DB-backed job queue (SKIP LOCKED) with drivers: Ffmpeg, Images (GD), Pdf (qpdf/gs/poppler), Youtube (thumbnails), Qr (server-side PNG) - Security: SSRF guard, MIME validation, rate limits, API-key auth, bcrypt admin login, security headers - Admin panel: dashboard, tools/categories/guides CRUD, SEO audit, analytics, job inspector with retry, system health, feature flags - Docker deployment (nginx + web/api FPM pools + scalable workers), PHPUnit suite (19 tests / 1139 assertions), PWA manifest + service worker
106 lines
3.4 KiB
PHP
106 lines
3.4 KiB
PHP
<?php
|
|
|
|
namespace Config;
|
|
|
|
use CodeIgniter\Config\BaseConfig;
|
|
|
|
/**
|
|
* Cross-Origin Resource Sharing (CORS) Configuration
|
|
*
|
|
* @see https://developer.mozilla.org/en-US/docs/Web/HTTP/CORS
|
|
*/
|
|
class Cors extends BaseConfig
|
|
{
|
|
/**
|
|
* The default CORS configuration.
|
|
*
|
|
* @var array{
|
|
* allowedOrigins: list<string>,
|
|
* allowedOriginsPatterns: list<string>,
|
|
* supportsCredentials: bool,
|
|
* allowedHeaders: list<string>,
|
|
* exposedHeaders: list<string>,
|
|
* allowedMethods: list<string>,
|
|
* maxAge: int,
|
|
* }
|
|
*/
|
|
public array $default = [
|
|
/**
|
|
* Origins for the `Access-Control-Allow-Origin` header.
|
|
*
|
|
* @see https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Access-Control-Allow-Origin
|
|
*
|
|
* E.g.:
|
|
* - ['http://localhost:8080']
|
|
* - ['https://www.example.com']
|
|
*/
|
|
'allowedOrigins' => [],
|
|
|
|
/**
|
|
* Origin regex patterns for the `Access-Control-Allow-Origin` header.
|
|
*
|
|
* @see https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Access-Control-Allow-Origin
|
|
*
|
|
* NOTE: A pattern specified here is part of a regular expression. It will
|
|
* be actually `#\A<pattern>\z#`.
|
|
*
|
|
* E.g.:
|
|
* - ['https://\w+\.example\.com']
|
|
*/
|
|
'allowedOriginsPatterns' => [],
|
|
|
|
/**
|
|
* Weather to send the `Access-Control-Allow-Credentials` header.
|
|
*
|
|
* The Access-Control-Allow-Credentials response header tells browsers whether
|
|
* the server allows cross-origin HTTP requests to include credentials.
|
|
*
|
|
* @see https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Access-Control-Allow-Credentials
|
|
*/
|
|
'supportsCredentials' => false,
|
|
|
|
/**
|
|
* Set headers to allow.
|
|
*
|
|
* The Access-Control-Allow-Headers response header is used in response to
|
|
* a preflight request which includes the Access-Control-Request-Headers to
|
|
* indicate which HTTP headers can be used during the actual request.
|
|
*
|
|
* @see https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Access-Control-Allow-Headers
|
|
*/
|
|
'allowedHeaders' => [],
|
|
|
|
/**
|
|
* Set headers to expose.
|
|
*
|
|
* The Access-Control-Expose-Headers response header allows a server to
|
|
* indicate which response headers should be made available to scripts running
|
|
* in the browser, in response to a cross-origin request.
|
|
*
|
|
* @see https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Access-Control-Expose-Headers
|
|
*/
|
|
'exposedHeaders' => [],
|
|
|
|
/**
|
|
* Set methods to allow.
|
|
*
|
|
* The Access-Control-Allow-Methods response header specifies one or more
|
|
* methods allowed when accessing a resource in response to a preflight
|
|
* request.
|
|
*
|
|
* E.g.:
|
|
* - ['GET', 'POST', 'PUT', 'DELETE']
|
|
*
|
|
* @see https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Access-Control-Allow-Methods
|
|
*/
|
|
'allowedMethods' => [],
|
|
|
|
/**
|
|
* Set how many seconds the results of a preflight request can be cached.
|
|
*
|
|
* @see https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Access-Control-Max-Age
|
|
*/
|
|
'maxAge' => 7200,
|
|
];
|
|
}
|