Access-Control-Allow-Origin

Open StephenAtty opened this issue 7 years ago • 2 comments

Should this be being set in the php code?

If you've set Access-Control-Allow-Origin in the apache config file (to stop leaching of bandwidth) then nothing works because you end up with two versions in the header.

Could it be made a switchable configuration in the $config global? So if needed people can turn it off

Aug 19 '18 11:08 StephenAtty

I agree. Right now there is no way to limit origins. It's not possible in .php nor in webserver config because sending multiple Access-Control-Allow-Origin is always invalid.

Sep 06 '19 13:09 hozikm

A clean pull request is welcomed.

Sep 06 '19 13:09 klokan