mirror of
https://github.com/minio/minio.git
synced 2024-12-25 22:55:54 -05:00
7af78af1f0
Since `addCustomerHeaders` middleware was after the `httpTracer` middleware, the request ID was not set in the http tracing context. By reordering these middleware functions, the request ID header becomes available. We also avoid setting the tracing context key again in `newContext`. Bonus: All middleware functions are renamed with a "Middleware" suffix to avoid confusion with http Handler functions.
45 lines
2.1 KiB
Go
45 lines
2.1 KiB
Go
// Copyright (c) 2015-2021 MinIO, Inc.
|
|
//
|
|
// This file is part of MinIO Object Storage stack
|
|
//
|
|
// This program is free software: you can redistribute it and/or modify
|
|
// it under the terms of the GNU Affero General Public License as published by
|
|
// the Free Software Foundation, either version 3 of the License, or
|
|
// (at your option) any later version.
|
|
//
|
|
// This program is distributed in the hope that it will be useful
|
|
// but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
// GNU Affero General Public License for more details.
|
|
//
|
|
// You should have received a copy of the GNU Affero General Public License
|
|
// along with this program. If not, see <http://www.gnu.org/licenses/>.
|
|
|
|
package cmd
|
|
|
|
import "net/http"
|
|
|
|
// Standard cross domain policy information located at https://s3.amazonaws.com/crossdomain.xml
|
|
const crossDomainXML = `<?xml version="1.0"?><!DOCTYPE cross-domain-policy SYSTEM "http://www.adobe.com/xml/dtds/cross-domain-policy.dtd"><cross-domain-policy><allow-access-from domain="*" secure="false" /></cross-domain-policy>`
|
|
|
|
// Standard path where an app would find cross domain policy information.
|
|
const crossDomainXMLEntity = "/crossdomain.xml"
|
|
|
|
// A cross-domain policy file is an XML document that grants a web client, such as Adobe Flash Player
|
|
// or Adobe Acrobat (though not necessarily limited to these), permission to handle data across domains.
|
|
// When clients request content hosted on a particular source domain and that content make requests
|
|
// directed towards a domain other than its own, the remote domain needs to host a cross-domain
|
|
// policy file that grants access to the source domain, allowing the client to continue the transaction.
|
|
func setCrossDomainPolicyMiddleware(h http.Handler) http.Handler {
|
|
return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
|
|
// Look for 'crossdomain.xml' in the incoming request.
|
|
if r.URL.Path == crossDomainXMLEntity {
|
|
// Write the standard cross domain policy xml.
|
|
w.Write([]byte(crossDomainXML))
|
|
// Request completed, no need to serve to other handlers.
|
|
return
|
|
}
|
|
h.ServeHTTP(w, r)
|
|
})
|
|
}
|