From 582e2c35a0339be66c357fe947e0d878f6b9abb5 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 1 Feb 2024 02:52:11 +0000
Subject: [PATCH 1/2] Bump the actix group with 1 update

Bumps the actix group with 1 update: [actix-cors](https://github.com/actix/actix-extras).


Updates `actix-cors` from 0.6.5 to 0.7.0
- [Release notes](https://github.com/actix/actix-extras/releases)
- [Commits](https://github.com/actix/actix-extras/compare/cors-v0.6.5...cors-v0.7.0)

---
updated-dependencies:
- dependency-name: actix-cors
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actix
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 Cargo.lock                      | 4 ++--
 svanill-vault-server/Cargo.toml | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/Cargo.lock b/Cargo.lock
index 749d6ade..5a0ac51d 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -21,9 +21,9 @@ dependencies = [
 
 [[package]]
 name = "actix-cors"
-version = "0.6.5"
+version = "0.7.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "0346d8c1f762b41b458ed3145eea914966bb9ad20b9be0d6d463b20d45586370"
+checksum = "f9e772b3bcafe335042b5db010ab7c09013dad6eac4915c91d8d50902769f331"
 dependencies = [
  "actix-utils",
  "actix-web",
diff --git a/svanill-vault-server/Cargo.toml b/svanill-vault-server/Cargo.toml
index b8072e34..776029af 100644
--- a/svanill-vault-server/Cargo.toml
+++ b/svanill-vault-server/Cargo.toml
@@ -12,7 +12,7 @@ readme = "README.md"
 svanill-vault-openapi = { path = "../svanill-vault-openapi", version = "0.1" }
 actix-web = { version = "4.4.1", features = ["rustls"] }
 actix-http = "3.5.1"
-actix-cors = "0.6.5"
+actix-cors = "0.7.0"
 actix-web-httpauth = "0.8.1"
 env_logger = "0.10.2"
 structopt = "0.3.26"

From b95acb46803a4314b802ef690e522014dc5340ab Mon Sep 17 00:00:00 2001
From: Riccardo Attilio Galli <riccardo@sideralis.org>
Date: Thu, 1 Feb 2024 00:08:33 -0800
Subject: [PATCH 2/2] Set origin mismatch to true as pre-update

---
 svanill-vault-server/src/server.rs | 1 +
 1 file changed, 1 insertion(+)

diff --git a/svanill-vault-server/src/server.rs b/svanill-vault-server/src/server.rs
index 23271c88..1784fb63 100644
--- a/svanill-vault-server/src/server.rs
+++ b/svanill-vault-server/src/server.rs
@@ -39,6 +39,7 @@ pub fn run(listener: TcpListener, data: AppData) -> Result<Server, std::io::Erro
                 http::header::ACCEPT,
                 http::header::CONTENT_TYPE,
             ])
+            .block_on_origin_mismatch(true)
             .max_age(86400);
 
         cors_handler = if cors_origin == "*" {