fix: fail closed on invalid cors config

2026-05-28 16:53:33 +08:00
parent 547fdab0b2
commit 7eb5f9c7d4
3 changed files with 49 additions and 16 deletions
--- a/internal/server/server.go
+++ b/internal/server/server.go
@@ -137,7 +137,9 @@ func Serve(cfg *config.Config) error {
 	themeService := service.NewThemeService(themeRepo)

 	// 设置 CORS 配置
-	middleware.SetCORSConfig(cfg.CORS)
+	if err := middleware.SetCORSConfig(cfg.CORS); err != nil {
+		return fmt.Errorf("invalid cors config: %w", err)
+	}

 	// 初始化中间件
 	rateLimitMiddleware := middleware.NewRateLimitMiddleware(cfg.RateLimit)