fix: allow zzstoatzz.io (custom domain) in production CORS (#995)

audio streaming app plyr.fm

The site redirects zzstoatzz.github.io → zzstoatzz.io, so the
browser origin is the custom domain. Allow both with a regex group.

Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>

authored by zzstoatzz.io

Claude Opus 4.6 and committed by

GitHub 1 week ago faa70497 e8c971d2

+1 -1

1 changed file

expand all

unified split

backend

src

backend

config.py

+1 -1

backend/src/backend/config.py

··· 223 223 return r"^(https://stg\.plyr\.fm|https://([a-z0-9]+\.)?relay-4i6\.pages\.dev|http://localhost:5173)$" 224 224 elif hostname in ("plyr.fm", "www.plyr.fm"): 225 225 # production: allow plyr.fm, www.plyr.fm, and embed consumers 226 - return r"^(https://(www\.)?plyr\.fm|https://zzstoatzz\.github\.io|https://([a-z0-9]+\.)?relay-4i6\.pages\.dev|http://localhost:5173)$" 226 + return r"^(https://(www\.)?plyr\.fm|https://zzstoatzz\.(github\.io|io)|https://([a-z0-9]+\.)?relay-4i6\.pages\.dev|http://localhost:5173)$" 227 227 else: 228 228 # local dev: allow localhost 229 229 return r"^(http://localhost:5173)$"