From ea4c5d8bfcd49fcb476d4971eaaa8e2ab80728ac Mon Sep 17 00:00:00 2001
From: Collin Barrett <6483057+collinbarrett@users.noreply.github.com>
Date: Tue, 3 Jun 2025 18:54:00 -0500
Subject: [PATCH] refactor(api): tweak cors config

---
 .../FilterLists.Directory.Api/Cors/CorsConfiguration.cs   | 8 +++++---
 1 file changed, 5 insertions(+), 3 deletions(-)

diff --git a/services/Directory/FilterLists.Directory.Api/Cors/CorsConfiguration.cs b/services/Directory/FilterLists.Directory.Api/Cors/CorsConfiguration.cs
index 3401e7f89..4b67c859a 100644
--- a/services/Directory/FilterLists.Directory.Api/Cors/CorsConfiguration.cs
+++ b/services/Directory/FilterLists.Directory.Api/Cors/CorsConfiguration.cs
@@ -14,9 +14,11 @@ internal static class CorsConfiguration
                     if (corsOptions.AllowedOrigins.Any(o => string.Equals(o, origin, StringComparison.OrdinalIgnoreCase)))
                         return true;
 
-                    if (corsOptions.StagingOriginPatterns is not null &&
-                        origin.StartsWith(corsOptions.StagingOriginPatterns.Start, StringComparison.OrdinalIgnoreCase) &&
-                        origin.EndsWith(corsOptions.StagingOriginPatterns.End, StringComparison.OrdinalIgnoreCase))
+                    if (corsOptions.StagingOriginPatterns is { } patterns &&
+                        !string.IsNullOrEmpty(patterns.Start) &&
+                        !string.IsNullOrEmpty(patterns.End) &&
+                        origin.StartsWith(patterns.Start, StringComparison.OrdinalIgnoreCase) &&
+                        origin.EndsWith(patterns.End, StringComparison.OrdinalIgnoreCase))
                         return true;
 
                     return false;