From 8fc28716a7fc2339794f77c5dfe507697d6674eb Mon Sep 17 00:00:00 2001
From: Elian Doran <contact@eliandoran.me>
Date: Wed, 7 Jan 2026 17:14:31 +0200
Subject: [PATCH] feat(client-standalone): set up CORS for Cloudflare Pages

---
 apps/client-standalone/public/functions/cors.js | 6 ++++++
 apps/client-standalone/vite.config.mts          | 1 +
 2 files changed, 7 insertions(+)
 create mode 100644 apps/client-standalone/public/functions/cors.js

diff --git a/apps/client-standalone/public/functions/cors.js b/apps/client-standalone/public/functions/cors.js
new file mode 100644
index 000000000..efaf09a5a
--- /dev/null
+++ b/apps/client-standalone/public/functions/cors.js
@@ -0,0 +1,6 @@
+export const onRequest = async (context) => {
+    const response = await context.next();
+    response.headers.set("Cross-Origin-Opener-Policy", "same-origin");
+    response.headers.set("Cross-Origin-Embedder-Policy", "require-corp");
+    return response;
+};
diff --git a/apps/client-standalone/vite.config.mts b/apps/client-standalone/vite.config.mts
index 2715eafd6..2c5116b79 100644
--- a/apps/client-standalone/vite.config.mts
+++ b/apps/client-standalone/vite.config.mts
@@ -79,6 +79,7 @@ export default defineConfig(() => ({
     cacheDir: '../../../node_modules/.vite/apps/client-standalone',
     base: "",
     plugins,
+    publicDir: join(__dirname, 'public'),
     resolve: {
         alias: [
             {