Enable CORS on /upload

package.json

@@ -11,6 +11,7 @@
     "body-parser": "~1.13.2",
     "cookie-parser": "~1.3.5",
     "cookie-session": "^1.2.0",
+    "cors": "^2.7.1",
     "debug": "~2.2.0",
     "express": "~4.13.1",
     "express-session": "^1.12.1",

public/javascripts/dropzone_custom.js

@@ -111,7 +111,7 @@ document.addEventListener("DOMContentLoaded", function(event) {
     var data = JSON.parse(file.xhr.response);
     if (!data.files || data.files.length <= 0) return;
     file.previewElement.querySelector(".link").classList.remove('hidden');
-    var name = document.querySelector('meta[name="site-href"]').getAttribute('value') + data.files[0].url;
+    var name = document.querySelector('meta[name="site-href"]').getAttribute('value') + "/" + data.files[0].url;
     file.previewElement.querySelector(".link-href").setAttribute('href', name);
     file.previewElement.querySelector(".link-href").innerHTML = name;
   });

routes/upload.js

@@ -1,6 +1,7 @@
 var express = require('express');
 var multer  = require('multer');
-var mkdirp = require('mkdirp');
+var mkdirp  = require('mkdirp');
+var cors    = require('cors');
 var config  = require('../config/core');
 var util    = require('../util/core');
 
@@ -39,7 +40,7 @@ var storage = multer.diskStorage({
 var upload = multer({ storage: storage, limits: {fileSize: config.MAX_UPLOAD_SIZE}, fileFilter: util.fileFilter });
 
 /* POST upload page. */
-router.post('/', upload.array('files[]', config.MAX_UPLOAD_COUNT), function(req, res, next) {
+router.post('/', cors(), upload.array('files[]', config.MAX_UPLOAD_COUNT), function(req, res, next) {
   var files = [];
   req.files.forEach(function(file) {
     db.run('UPDATE files SET size = ? WHERE filename = ?', [file.size, file.filename]);