在Sails中阻止请求(通过CORS设置)

module.exports.cors = {
  allRoutes: true,
  allowOrigins: ['http://example.com', 'https://example.com'],
  allowCredentials: false,
  allowRequestMethods: 'GET, POST, PUT, DELETE, OPTIONS, HEAD',
  allowRequestHeaders: 'content-type'
};

module.exports = {
  friendlyName: 'Some action',
  description: 'Block requests using CORS',
  exits: {
    success: {
      description: 'Request blocked successfully.'
    }
  },
  fn: async function (inputs, exits) {
    // Apply CORS policy
    this.res.set('Access-Control-Allow-Origin', sails.config.cors.allowOrigins);
    this.res.set('Access-Control-Allow-Methods', sails.config.cors.allowRequestMethods);
    this.res.set('Access-Control-Allow-Headers', sails.config.cors.allowRequestHeaders);

    return exits.success();
  }
};