feat: Only allow requests from HTTPs

ReVanced · Oct 2, 2024 · a6d7da1 · a6d7da1
1 parent 87174ea
commit a6d7da1
Showing 1 changed file with 1 addition and 4 deletions.
diff --git a/src/main/kotlin/app/revanced/api/configuration/HTTP.kt b/src/main/kotlin/app/revanced/api/configuration/HTTP.kt
@@ -22,10 +22,7 @@ fun Application.configureHTTP() {
         allowCredentials = true
 
         configurationRepository.corsAllowedHosts.forEach { host ->
-            allowHost(
-                host = host,
-                schemes = listOf("http", "https"),
-            )
+            allowHost(host = host, schemes = listOf("https"))
         }
     }