allow environment variables in cors urls, optimize replace regex

Author: khassel

js/node_helper.js

@@ -90,7 +90,7 @@ const NodeHelper = Class.extend({
 			socket.onAny((notification, payload) => {
 				if (config.hideConfigSecrets && payload && typeof payload === "object") {
 					try {
-						const payloadStr = JSON.stringify(payload).replaceAll(/\*\*(SECRET_.*)\*\*/g, (match, group) => {
+						const payloadStr = JSON.stringify(payload).replaceAll(/\*\*(SECRET_[^*]+)\*\*/g, (match, group) => {
 							return process.env[group];
 						});
 						this.socketNotificationReceived(notification, JSON.parse(payloadStr));

js/server_functions.js

@@ -35,6 +35,11 @@ async function cors (req, res) {
 			return res.status(400).send(url);
 		} else {
 			url = match[1];
+			if (config.hideConfigSecrets) {
+				url = url.replaceAll(/\*\*(SECRET_[^*]+)\*\*/g, (match, group) => {
+					return process.env[group];
+				});
+			}
 
 			const headersToSend = getHeadersToSend(req.url);
 			const expectedReceivedHeaders = geExpectedReceivedHeaders(req.url);