how can i disable CORS policity for recordings?

616 views
Skip to first unread message

Alex Ejov

unread,
Apr 22, 2019, 7:29:03 AM4/22/19
to BigBlueButton-dev
Hello. how can i disable CORS policity for recordings? i want to get page recording via php or javascript to another website. I need to do this so that no one can find out the address of the site with the records
cors.jpg

migue.r...@grupo2000.es

unread,
Apr 22, 2019, 8:21:28 AM4/22/19
to BigBlueButton-dev
Can you try to put this?: header('Access-Control-Allow-Origin: http://URL WHO SENDS PETITION');

Alex Ejov

unread,
Apr 22, 2019, 12:59:00 PM4/22/19
to BigBlueButton-dev
tell me where better to put it? is this server configuration?

понедельник, 22 апреля 2019 г., 17:21:28 UTC+5 пользователь migue.r...@grupo2000.es написал:

Chad Pilkey

unread,
Apr 22, 2019, 3:41:36 PM4/22/19
to BigBlueButton-dev
It has to be added to the nginx configuration on the BigBlueButton server. If you search "CORS nginx" you'll see lots of examples. What you do really depends on how open you want it (specific requester or anyone).


The changes would go into the location blocks in /etc/bigbluebutton/nginx/presentation.nginx.

One additional thing to note is that it will still be pretty trivial to find the server hosting the files. Anyone could just open their browser's network tab and it will show where the resources are being loaded from.

Alex Ejov

unread,
Apr 23, 2019, 2:36:19 AM4/23/19
to BigBlueButton-dev
Hello.  
I found the configuration file that needed to be changed. it is located on the path / etc / nginx / sites-available file bigbluebutton. added the add_header 'Access-Control-Allow-Origin' header there "" https://mysitewheniwantgettingrecoord.com "always; . A lot of Access-Control-Allow-Origin errors have disappeared, but it turns out I cannot get video files and others because there is no way to get the full path to the record and it writes undefined. watch please screenshot.
понедельник, 22 апреля 2019 г., 14:29:03 UTC+3 пользователь Alex Ejov написал:
cors-undefined.jpg

Chad Pilkey

unread,
Apr 23, 2019, 2:54:49 PM4/23/19
to BigBlueButton-dev
The "undefined" parts are where the internal meetingId goes. The playback script retrieves it from the URL properties. You could either add the same query string properties to your page or load a custom playback.

Alex Ejov

unread,
Apr 24, 2019, 12:37:10 AM4/24/19
to BigBlueButton-dev
yes. its working_)) thank you

вторник, 23 апреля 2019 г., 21:54:49 UTC+3 пользователь Chad Pilkey написал:
Reply all
Reply to author
Forward
0 new messages