From: Paweł Chmielowski Date: Mon, 12 Sep 2016 13:39:00 +0000 (+0200) Subject: Add X-Admin and basic auth header to CORS allowed headers in http_api X-Git-Tag: 16.09~3 X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=054382f074b2739fc6380db83454d1aae26d2f07;p=ejabberd Add X-Admin and basic auth header to CORS allowed headers in http_api --- diff --git a/src/mod_http_api.erl b/src/mod_http_api.erl index 95a4ad51e..e2f6cc240 100644 --- a/src/mod_http_api.erl +++ b/src/mod_http_api.erl @@ -101,7 +101,7 @@ -define(AC_ALLOW_HEADERS, {<<"Access-Control-Allow-Headers">>, - <<"Content-Type">>}). + <<"Content-Type, Authorization, X-Admin">>}). -define(AC_MAX_AGE, {<<"Access-Control-Max-Age">>, <<"86400">>}).