initial commit

Derek Jones · Derek Jones · commit e9dc35b91192 · 2016-12-22T00:15:33.000-08:00
diff --git a/.editorconfig b/.editorconfig
@@ -0,0 +1,20 @@
+root = true
+
+[*]
+charset = utf-8
+end_of_line = lf
+trim_trailing_whitespace = true
+insert_final_newline = true
+
+[*.{php,js,css,json,xml,json}]
+indent_style = tab
+indent_size = 4
+
+[*.md]
+indent_style = space
+indent_size = 4
+trim_trailing_whitespace = false
+
+[*.{rst,rb,yml},package.json]
+indent_style = space
+indent_size = 2
diff --git a/.gitignore b/.gitignore
@@ -0,0 +1,2 @@
+.DS_Store
+vendor
diff --git a/.travis.yml b/.travis.yml
@@ -0,0 +1,30 @@
+language: php
+
+php:
+  - 5.3
+  - 5.4
+  - 5.5
+  - 5.6
+  - 7.0
+  - 7.1
+
+install:
+  - composer install
+
+script:
+  - cross_origin_headers/vendor/bin/parallel-lint --exclude cross_origin_headers/vendor .
+
+before_deploy:
+  - composer install --no-dev
+  - zip -r 'Cross-Origin Headers' cross_origin_headers
+
+deploy:
+  provider: releases
+  api_key:
+    secure: EOjv+D4YETI60ba+VHx2N2nJ5euSUNXb3Lu2rhO8dy2U6hV9T9nSg7O/ujUJBLjR9mPYPgVgjt4dvhfmpYjqU7QBpMaslcQGnIonwBtUSVwiIv/9Gemto/Uqb1hL3Vd/WBGdMzqNOq49Ds0VJeRnq+BdWmGWRind9mSyMIV6HUKRj2H1gNAh37eqdNkHsVeIXd/cHhMtAeXo2iYtuzrHx1m8NuM0CAnZCBfzTKbiu2DDjVXjc56rbZ2/YgcO9KjEh4bk2gq4pv95qsDzoMaiGprQELbSDo/y33IKT1IvgVa9odl4WxFuhyc298HZn05RKAyFrrAW8cOHpQ6NfXVOSGA0KEqeXfJi0x7r4DzDyEs7SgLk3n+oUGk2zb0rbVmr7h9HUS/BDo6SBLD1fPiz5L/u4klHoYmzu6DjkvAsdmSGj6eFcpmU1ciDT30fQj+6/2NxbNn/8JJoYzXgVnCgBzSGlvdYUzigvUU5TiBAN7bDqplbrTJpb3CLEcrR3fdNiJ8sW4aT6vrWPYcJqFjYnT/th5NqNK9z1EW5guojD4ysDdSp2WMzjdVupRbVr9mT3uC/v5uHsbS8SGGQ0RQMNGzJroVebMZ9nVuq8iEFjn7TxvoUDaUmw8ElvmxmJmZ3RlPPvneddcKJqgPgJWnAtgQza/2hfGVDuv1B+wr+PqI=
+  file: "Cross-Origin Headers.zip"
+  skip_cleanup: true
+  on:
+    php: 7.1
+    tags: true
+    condition: $TRAVIS_PULL_REQUEST = false
diff --git a/README.md b/README.md
@@ -0,0 +1 @@
+cross_origin_headers/README.md
diff --git a/composer.json b/composer.json
@@ -0,0 +1,9 @@
+{
+    "require": {},
+    "config": {
+        "vendor-dir": "cross_origin_headers/vendor"
+    },
+    "require-dev": {
+        "jakub-onderka/php-parallel-lint": "^0.9.2"
+    }
+}
diff --git a/composer.lock b/composer.lock
diff --git a/cross_origin_headers/README.md b/cross_origin_headers/README.md
@@ -0,0 +1,67 @@
+# Cross-Origin Headers
+
+Adds an `Access-Control-Allow-Origin` header to any request made to a template that includes this tag.
+
+## Requirements
+
+- ExpressionEngine 3
+
+## Installation
+
+1. Download the [latest release](https://github.com/EllisLab/Cross-Origin-Headers/releases/latest).
+2. Copy the `cross_origin_headers` folder to your `system/user/addons` folder (you can ignore the rest of this repository's files).
+3. In your ExpressionEngine control panel, visit the Add-On Manager and click Install next to "Cross-Origin Headers".
+
+## Usage
+
+### `{exp:cross_origin_headers}`
+
+#### Example Usage
+
+The Cross-Origin Headers plugin is a single tag that you can put anywhere in your template. It might be best to put it near the top, or at least in your template comments so it's clear to anyone reading your template for the first time what's going on.
+
+```
+{exp:cross_origin_headers}
+```
+
+#### Parameters
+
+##### domain= (default: `*`)
+
+A specific domain to allow cross-origin access. The default `*` will allow the request to come from any source, essentially making this a public resource.
+
+```
+{exp:cross_origin_headers domain='http://example.com'}
+```
+
+Due to a practical restriction in implementation of the [Access-Control-Allow-Origin standard](https://www.w3.org/TR/cors/#access-control-allow-origin-response-header), you can only specify a single origin. Therefore this plugin works when you want a fully public resource, or restricted to a single origin. If you need endpoints to be available from multiple domains, but not be public, then you will need to handle that in your server configuration. See the article [Cross-Origin Resource Sharing](https://expressionengine.com/learn/cross-origin-resource-sharing-cors) for potential options.
+
+**Note:** You must specify the protocol (`http://`, `https://`) with the domain, as each are treated as separate origins.
+
+## Change Log
+
+### 1.0.0
+
+- Initial release. Boom!
+
+## Additional Files
+
+You may be wondering what the rest of the files in this package are for. They are solely for development, so if you are forking the GitHub repo, they can be helpful. If you are just using the add-on in your ExpressionEngine installation, you can ignore all of these files.
+
+- **.editorconfig**: [EditorConfig](http://editorconfig.org) helps developers maintain consistent coding styles across files and text editors.
+- **.gitignore:** [.gitignore](https://git-scm.com/docs/gitignore) lets you specify files in your working environment that you do not want under source control.
+- **.travis.yml:** A [Travis CI](https://travis-ci.org) configuration file for continuous integration (automated testing, releases, etc.).
+- **.composer.json:** A [Composer project setup file](https://getcomposer.org/doc/01-basic-usage.md) that manages development dependencies.
+- **.composer.lock:** A [list of dependency versions](https://getcomposer.org/doc/01-basic-usage.md#composer-lock-the-lock-file) that Composer has locked to this project.
+
+## License
+
+Copyright (C) 2016 EllisLab, Inc.
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL ELLISLAB, INC. BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+Except as contained in this notice, the name of EllisLab, Inc. shall not be used in advertising or otherwise to promote the sale, use or other dealings in this Software without prior written authorization from EllisLab, Inc.
diff --git a/cross_origin_headers/addon.setup.php b/cross_origin_headers/addon.setup.php
@@ -0,0 +1,11 @@
+<?php
+
+return array(
+	'author'         => 'EllisLab',
+	'author_url'     => 'https://ellislab.com/',
+	'name'           => 'Cross-Origin Headers',
+	'description'    => 'Outputs headers in a template to enable CORS (cross-origin resource sharing).',
+	'version'        => '1.0.0',
+	'namespace'      => 'User\Addons\CrossOriginHeaders',
+	'settings_exist' => FALSE
+);
diff --git a/cross_origin_headers/pi.cross_origin_headers.php b/cross_origin_headers/pi.cross_origin_headers.php
@@ -0,0 +1,58 @@
+<?php if ( ! defined('BASEPATH')) exit('No direct script access allowed');
+
+/*
+Copyright (C) 2016 EllisLab, Inc.
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
+ELLISLAB, INC. BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER
+IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
+CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+Except as contained in this notice, the name of EllisLab, Inc. shall not be
+used in advertising or otherwise to promote the sale, use or other dealings
+in this Software without prior written authorization from EllisLab, Inc.
+*/
+
+/**
+ * Cross-Origin Headers Class
+ *
+ * @package			ExpressionEngine
+ * @category		Plugin
+ * @author			EllisLab
+ * @copyright		Copyright (c) 2016, EllisLab, Inc.
+ * @link			https://github.com/EllisLab/Cross-Origin-Headers
+ */
+class Cross_origin_headers {
+
+	/*
+	 * @var  string  The plugin return data
+	 */
+	public $return_data;
+
+	/**
+	 * Constructor
+	 *
+	 * @access	public
+	 * @return	void
+	 */
+	public function __construct()
+	{
+		$domain = (ee()->TMPL->fetch_param('domain', '*'));
+		ee()->output->set_header("Access-Control-Allow-Origin: ${domain}");
+	}
+}
+// END CLASS
+
+// EOF
