Update the CORS configuration
This commit is contained in:
parent
007145e213
commit
93e53649cb
1 changed files with 3 additions and 1 deletions
|
@ -82,7 +82,9 @@ header('X-Frame-Options: SAMEORIGIN');
|
||||||
|
|
|
|
||||||
*/
|
*/
|
||||||
|
|
||||||
header('Access-Control-Allow-Origin: *'); // NOTICE: Change this header to restrict CORS access.
|
header('Access-Control-Allow-Origin: ' . ($_SERVER['HTTP_ORIGIN'] ?? '*')); // NOTICE: Change this header to restrict CORS access.
|
||||||
|
|
||||||
|
header('Access-Control-Allow-Credentials: "true"');
|
||||||
|
|
||||||
if (isset($_SERVER['HTTP_ACCESS_CONTROL_REQUEST_METHOD']))
|
if (isset($_SERVER['HTTP_ACCESS_CONTROL_REQUEST_METHOD']))
|
||||||
{
|
{
|
||||||
|
|
Loading…
Reference in a new issue