socket-function 0.77.0 → 0.78.0

package/SocketFunction.ts

@@ -65,6 +65,10 @@ export class SocketFunction {
 
     public static HTTP_COMPRESS = false;
 
+    // If you have HTTP resources that require cookies you might to set `SocketFunction.COEP = "require-corp"`
+    //  - Cross-origin-resource-policy.
+    public static COEP = "credentialless";
+
     // In retrospect... dynamically changing the wire serializer is a BAD idea. If any calls happen
     //  before it is changed, things just break. Also, it needs to be changed on both sides,
     //  or else things break. Also, it is very hard to detect when the issue is different serializers

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "socket-function",
-	"version": "0.77.0",
+	"version": "0.78.0",
 	"main": "index.js",
 	"license": "MIT",
 	"dependencies": {

package/src/callHTTPHandler.ts

@@ -65,8 +65,7 @@ export async function httpCallHandler(request: http.IncomingMessage, response: h
         {
             response.setHeader("Strict-Transport-Security", "max-age=63072000; includeSubDomains; preload");
             response.setHeader("Cross-Origin-Opener-Policy", "same-origin-allow-popups");
-            // NOTE: "credentialless" would work here too
-            response.setHeader("Cross-Origin-Embedder-Policy", "require-corp");
+            response.setHeader("Cross-Origin-Embedder-Policy", SocketFunction.COEP);
 
             let origin = request.headers.origin || request.headers.referer;
             let allowed = false;