Skip to content
This repository has been archived by the owner on Nov 1, 2024. It is now read-only.

v1.0.1: [TASK] Skip fake CORS requests
Compare
Choose a tag to compare
@stephanschuler stephanschuler released this 30 Jun 16:04
· 37 commits to master since this release
v1.0.1
252c67f 
Unfortunately chrome XHR always adds the HTTP_ORIGIN header, no matter
if its an actual cross domain request or just targets the very same
location. So server side CORS handling needs to detect those and skip
response handling. Otherwise every local domain would be required to be
added to the "allowOrigins" section.
Assets 2
Loading