clones/friendica
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Deactivate CORS related headers

This commit is contained in:
Michael 2021-06-09 07:42:23 +00:00
parent 58a513cb30
commit c9b66d6e28
1 changed files with 7 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
src/App/Module.php
View File

@ -267,11 +267,13 @@ class Module
if ($server['REQUEST_METHOD'] === Router::OPTIONS) {
header('HTTP/1.1 204 No Content');
header('access-control-allow-credentials: true');
header('access-control-allow-headers: Authorization,Content-Type');
header('access-control-allow-methods: ' . implode(',', Router::ALLOWED_METHODS));
header('access-control-allow-origin: *');
header('access-control-max-age: 86400');
header('Allow: ' . implode(',', Router::ALLOWED_METHODS));
// Deactivated until we know about possible side effects
// header('Access-Control-Allow-Credentials: true');
// header('Access-Control-Allow-Headers: Authorization,Content-Type');
// header('Access-Control-Allow-Methods: ' . implode(',', Router::ALLOWED_METHODS));
// header('Access-Control-Allow-Origin: ' . DI::baseUrl());
// header('Access-Control-Max-Age: 86400');
exit();
}