fix: #14003, set ACAO header on webfinger responses

2026-03-01 01:51:18 +01:00 · 2026-02-27 13:27:38 -05:00
parent 3fab2074bd
commit 415602d89e
1 changed files with 1 additions and 0 deletions
--- a/src/controllers/well-known.js
+++ b/src/controllers/well-known.js
@@ -38,6 +38,7 @@ Controller.webfinger = async (req, res) => {
 			return res.sendStatus(404);
 		}

+		res.set('Access-Control-Allow-Origin', '*');
 		res.status(200).json(response);
 	} catch (e) {
 		res.sendStatus(404);