From e4235b033fab41087141b6b9c50d66eccff775cf Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?C=C3=A9dric=20Krier?= <ced@b2ck.com>
Date: Tue, 13 Sep 2022 00:20:53 +0200
Subject: [PATCH] Allow null origin also to GET requests

The Origin header is also set for GET requests made by JavaScript.

issue11691
review417911004
(grafted from 2466a04c55bb8d913d19485c61d571d46ec04241)

--HG--
branch : 6.0
---
 routes.py | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/routes.py b/routes.py
index 305f79c9ab..1042158b2d 100644
--- a/routes.py
+++ b/routes.py
@@ -14,6 +14,7 @@ timesheet_application = user_application('timesheet')
 
 
 @app.route('/<database_name>/timesheet/employees', methods=['GET'])
+@allow_null_origin
 @with_pool
 @with_transaction()
 @timesheet_application
@@ -25,6 +26,7 @@ def timesheet_employees(request, pool):
 
 @app.route('/<database_name>/timesheet/employee/<int:employee>/works',
     methods=['GET'])
+@allow_null_origin
 @with_pool
 @with_transaction()
 @timesheet_application
@@ -50,6 +52,7 @@ def timesheet_works(request, pool, employee):
 
 @app.route('/<database_name>/timesheet/employee/<int:employee>/lines/<date>',
     methods=['GET'])
+@allow_null_origin
 @with_pool
 @with_transaction()
 @timesheet_application