fix: remove X-Requested-With restriction (#367)

LibreTexts · Sep 5, 2024 · 6a2bf5d · 6a2bf5d
1 parent 07211cb
commit 6a2bf5d
Show file tree

Hide file tree

Showing 2 changed files with 1 addition and 12 deletions.
diff --git a/server/api.js b/server/api.js
@@ -96,18 +96,6 @@ router.use(cors({
 
 router.use(middleware.authSanitizer);
 
-router.use(middleware.middlewareFilter(
-  [
-    ...ssoRoutes,
-    ...apiAuthRoutes,
-    '/commons/kbexport',
-    '/analytics/learning/init',
-    '/payments/webhook',
-    '/cloudflare/stream-url',
-  ],
-  middleware.requestSecurityHelper,
-));
-
 /* Auth */
 router.route('/oidc/libretexts').get(authAPI.completeLogin);
 

diff --git a/server/middleware.ts b/server/middleware.ts
@@ -129,6 +129,7 @@ function authSanitizer(req: Request, _res: Response, next: NextFunction) {
 /**
  * Performs security checks on incoming requests by examing header values.
  *
+ * @deprecated
  * @param {express.Request} req - Incoming request object.
  * @param {express.Response} res - Outgoing response object.
  * @param {express.NextFunction} next - Next middleware function to run.