From 73f40ad570e7e4b60ff1de63dea9931cda045825 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?=D0=90=D0=BD=D1=82=D0=BE=D0=BD=20=D0=A2=D1=80=D0=BE=D1=88?= =?UTF-8?q?=D0=B8=D0=BD?= Date: Fri, 14 Aug 2026 00:45:52 +0300 Subject: [PATCH] server: send Access-Control-Allow-Private-Network on CORS responses Lets a public-hosted PWA reach a local simtrace2-pysniff-server (http://127.0.0.1:8081); without it the browser blocks the preflight before any request is sent. --- simtrace2_pysniff/server/server.py | 3 +++ 1 file changed, 3 insertions(+) diff --git a/simtrace2_pysniff/server/server.py b/simtrace2_pysniff/server/server.py index f782204..85c0bdf 100644 --- a/simtrace2_pysniff/server/server.py +++ b/simtrace2_pysniff/server/server.py @@ -36,6 +36,7 @@ class RequestHandler(BaseHTTPRequestHandler): self.send_header('Access-Control-Allow-Origin', '*') self.send_header('Access-Control-Allow-Methods', 'GET, POST, PATCH, DELETE, OPTIONS') self.send_header('Access-Control-Allow-Headers', 'Content-Type') + self.send_header('Access-Control-Allow-Private-Network', 'true') self.end_headers() self.wfile.write(body) @@ -45,6 +46,7 @@ class RequestHandler(BaseHTTPRequestHandler): self.send_header('Content-Length', len(data)) self.send_header('Content-Disposition', _content_disposition(filename)) self.send_header('Access-Control-Allow-Origin', '*') + self.send_header('Access-Control-Allow-Private-Network', 'true') self.end_headers() self.wfile.write(data) @@ -74,6 +76,7 @@ class RequestHandler(BaseHTTPRequestHandler): self.send_header('Access-Control-Allow-Origin', '*') self.send_header('Access-Control-Allow-Methods', 'GET, POST, PATCH, DELETE, OPTIONS') self.send_header('Access-Control-Allow-Headers', 'Content-Type') + self.send_header('Access-Control-Allow-Private-Network', 'true') self.end_headers() # --- GET ---