be/int/web/reception/browser: fixe OriginChecker returns with failure when an allowance found

ufukty · ufukty · commit ed4b5cf2d06a · 2026-01-23T11:43:19.000+03:00
diff --git a/backend/internal/web/reception/browser/origin.go b/backend/internal/web/reception/browser/origin.go
@@ -36,7 +36,7 @@ func (c OriginChecker) preflight(w http.ResponseWriter, r *http.Request) {
 func (c OriginChecker) actual(w http.ResponseWriter, r *http.Request) {
 	allowance := matchAny(c.Allowances, r.Header.Get(headers.Origin), r.Method, r.URL.Path, slices.Collect(maps.Keys(r.Header)))
 
-	if allowance != nil {
+	if allowance == nil {
 		http.Error(w, "Please try again using the official website.", http.StatusForbidden)
 		return
 	}

Original file line number	Diff line number	Diff line change
`@@ -36,7 +36,7 @@ func (c OriginChecker) preflight(w http.ResponseWriter, r *http.Request) {`
`36`	`36`	`func (c OriginChecker) actual(w http.ResponseWriter, r *http.Request) {`
`37`	`37`	`allowance := matchAny(c.Allowances, r.Header.Get(headers.Origin), r.Method, r.URL.Path, slices.Collect(maps.Keys(r.Header)))`
`38`	`38`
`39`		`- if allowance != nil {`
	`39`	`+ if allowance == nil {`
`40`	`40`	`http.Error(w, "Please try again using the official website.", http.StatusForbidden)`
`41`	`41`	`return`
`42`	`42`	`}`