murdercode/Nova4-TinymceEditor

<?php

namespace Murdercode\TinymceEditor\Http\Middleware;

use Closure;

class TinymceMiddleware
{
    public function handle($request, Closure $next)
    {

        /**
         * Check if the upload is globally enabled
         */
        $isActive = config('nova-tinymce-editor.extra.upload_images.enabled') ?? false;
        if (! $isActive) {
            header('HTTP/1.1 500 Server Error');

            return response()->json(['error' => 'Server error']);
        }

        /**
         * Check if the request coming from the same origin
         */
        $accepted_origins = [config('app.url')];
        if (isset($_SERVER['HTTP_ORIGIN'])) {
            if (in_array($_SERVER['HTTP_ORIGIN'], $accepted_origins)) {
                header('Access-Control-Allow-Origin: '.$_SERVER['HTTP_ORIGIN']);
            } else {
                header('HTTP/1.1 403 Origin Denied');

                return response()->json(['error' => 'Origin denied']);
            }
        }

        return $next($request);
    }
}