github-mirror/discourse
2
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2025-01-18 18:02:46 +08:00
Code Issues Actions 1 Packages Projects Releases Wiki Activity

Merge pull request #3467 from boushley/enable-cors-logout

Browse Source 
Enable CORS requests to pass necessary headers.
This commit is contained in:
Robin Ward 2015-05-14 13:21:05 -04:00
commit 2e85a817b2
1 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
config/initializers/08-rack-cors.rb
View File

@ -29,7 +29,8 @@ if GlobalSetting.enable_cors
end
headers['Access-Control-Allow-Origin'] = origin || cors_origins[0]
headers['Access-Control-Allow-Credentials'] = "true"
headers['Access-Control-Allow-Headers'] = 'X-Requested-With, X-CSRF-Token'
headers['Access-Control-Allow-Credentials'] = 'true'
end
headers