CORS: answer with only one allowed domain (the origin one) #9

Open
opened 2019-09-13 14:54:20 +00:00 by avernois · 0 comments
avernois commented 2019-09-13 14:54:20 +00:00 (Migrated from gitlab.com)

"Access-Control-Allow-Origin" only accept one origin (and not a list as we currently do).

To accept multiple origin, we should set "Access-Control-Allow-Origin" with the origin of the request (if it comes from an allowed origin).

"Access-Control-Allow-Origin" only accept one origin (and not a list as we currently do). To accept multiple origin, we should set "Access-Control-Allow-Origin" with the origin of the request (if it comes from an allowed origin).
Sign in to join this conversation.
No labels
Doing
To Do
api
test
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
avernois/pay_what_you_want#9
No description provided.