From b34cad3523e8c1194d5150935e02692a81edc94e Mon Sep 17 00:00:00 2001
From: Stewart Allen <stewart.allen@gmail.com>
Date: Sun, 15 May 2022 12:02:38 -0400
Subject: [PATCH] add cors headers to enable SharedArrayBuffer

---
 app.js | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/app.js b/app.js
index 819c0250..f26532f1 100644
--- a/app.js
+++ b/app.js
@@ -722,7 +722,9 @@ function ifModifiedDate(req) {
 function addCorsHeaders(req, res) {
     res.setHeader('Access-Control-Allow-Credentials', 'true');
     res.setHeader('Access-Control-Allow-Headers', 'X-Moto-Ajax, Content-Type');
-    res.setHeader("Access-Control-Allow-Origin", req.headers['origin'] || '*');
+    res.setHeader('Access-Control-Allow-Origin', req.headers['origin'] || '*');
+    res.setHeader("Cross-Origin-Opener-Policy", 'same-origin');
+    res.setHeader("Cross-Origin-Embedder-Policy", 'require-corp');
     res.setHeader("Allow", "GET,POST,OPTIONS");
 }
 
@@ -799,6 +801,7 @@ function cookieValue(cookie,key) {
 
 function rewriteHtmlVersion(req, res, next) {
     if (["/kiri/","/mesh/","/meta/"].indexOf(req.app.path) >= 0) {
+        addCorsHeaders(req, res);
         let real_write = res.write;
         let real_end = res.end;
         let mlen = '{{version}}'.length;