feat(conf): do not insert CORS middleware if ALLOWED_URL is "unset"

This allows easy disablement of CORS for testing.

Signed-off-by: Ophestra Umiker <cat@ophivana.moe>

app.go

@@ -17,10 +17,14 @@ func serve(sig chan os.Signal, db *leveldb.DB) error {
 	app := fiber.New()
 
 	// cors
+	if conf[allowedURL] != "unset" {
 		app.Use(cors.New(cors.Config{
 			AllowOrigins: []string{conf[allowedURL]},
 			AllowHeaders: []string{"Origin", "Content-Type", "Accept"},
 		}))
+	} else {
+		log.Println("CORS disabled")
+	}
 
 	var captcha fiber.Handler
 	hCaptchaEnable := conf[hCaptchaSiteKey] != "unset" && conf[hCaptchaSecretKey] != "unset"