Download as
Browse Code »

Commit 3f5e397622f607b3c02e41559ac221dc656ce682

Authored by Braulio Bhavamitra
2 parents a02ded99 e51453fd
Exists in master and in 22 other branches angular_poc, api-article-archived, article-readonly, backup-7-jan-2016, captcha_serpro_plugin, content-manager-hostspot, export-comment-paragraph, fix_event_date_issue, login-captcha, master_rails3, new_video_plugin, pg_search_rank, production, refactor_with_role, refactor_with_role_scope, remove_profile_cat_icons, resend_confirmation_email, staging, staging_rails3, tasks_keep_filter_params, theme-brasil-digital-from-staging, travis

Merge branch 'ai3029' into 'master' 

Allow Access-Control-Allow-Credentials in Access-Control-Allow-Origin

http://noosfero.org/Development/ActionItem3029

See merge request !129
Showing 1 changed file with 1 additions and 0 deletions   Show diff stats
app/controllers/application_controller.rb
  Diff comments   View file @3f5e397
... ... @@ -28,6 +28,7 @@ class ApplicationController < ActionController::Base
28 28 unless environment.access_control_allow_methods.blank?
29 29 response.headers["Access-Control-Allow-Methods"] = environment.access_control_allow_methods
30 30 end
  31 + response.headers["Access-Control-Allow-Credentials"] = 'true'
31 32 elsif environment.restrict_to_access_control_origins
32 33 render_access_denied _('Origin not in allowed.')
33 34 end
... ...