From: Vincent Vanwaelscappel <vincent@cubedesigners.com>
Date: Mon, 12 Jan 2026 18:01:03 +0000 (+0100)
Subject: wait #7871 @0:10
X-Git-Url: http://git.cubedesigners.com/?a=commitdiff_plain;h=c8497056734c8baca13b5ee3c76e4b34a59bb220;p=fluidbook-toolbox.git

wait #7871 @0:10
---

diff --git a/app/Http/Controllers/Admin/Operations/FluidbookPublication/Services/PDFFormOperation.php b/app/Http/Controllers/Admin/Operations/FluidbookPublication/Services/PDFFormOperation.php
index 38948843e..73dec8fff 100644
--- a/app/Http/Controllers/Admin/Operations/FluidbookPublication/Services/PDFFormOperation.php
+++ b/app/Http/Controllers/Admin/Operations/FluidbookPublication/Services/PDFFormOperation.php
@@ -5,6 +5,7 @@ namespace App\Http\Controllers\Admin\Operations\FluidbookPublication\Services;
 use App\Http\Middleware\CheckIfAdmin;
 use App\Http\Middleware\VerifyCsrfToken;
 use App\Models\FluidbookPublication;
+use Cubist\Backpack\Middleware\CORSMiddleware;
 use Cubist\Util\CommandLine;
 use Cubist\Util\Files\Files;
 use Cubist\Util\Text;
@@ -19,7 +20,7 @@ trait PDFFormOperation
     protected function setupPDFFormRoutes($segment, $routeName, $controller)
     {
         foreach (['services', 's'] as $s) {
-            Route::match(['post'], $s . '/pdfform', $controller . '@pdfForm')->withoutMiddleware([CheckIfAdmin::class, VerifyCsrfToken::class]);
+            Route::match(['post'], $s . '/pdfform', $controller . '@pdfForm')->middleware([CORSMiddleware::class])->withoutMiddleware([CheckIfAdmin::class, VerifyCsrfToken::class]);
         }
     }