Download as
Browse Code »

Commit e51453fd3b20c01ed6b77b2c4396ec4254fbd403

Authored by Braulio Bhavamitra
1 parent abdf6fab
Exists in master and in 29 other branches add_member_task_reject_details, admin_visible_profile, article-list-template, community_notifications, contact_admin_translation, event_fixes, fix_comments_pagination, fix_rails4_organization_ratings, fix_sign_up_form, follow_step_fix, forum_topic_creation, mirror_block_improvements, multi_env_on_remote_user, new_security, noosfero_spb_ci, organization_ratings_improvements, organization_ratings_link_to_profile_stable-spb-1.3, organization_ratings_translations_fix, profile_api_improvements, ratings_minor_fixes, remote_user_fix, send_email_to_admins, stable-spb-1.3, stable-spb-1.3-fixes, stable-spb-1.4, stable-spb-1.5, suggest_rejected_value, web_steps_improvements, xss_terminate_custom_options

Allow Access-Control-Allow-Credentials in Access-Control-Allow-Origin

Showing 1 changed file with 1 additions and 0 deletions   Show diff stats
app/controllers/application_controller.rb
  Diff comments   View file @e51453f
... ... @@ -13,6 +13,7 @@ class ApplicationController < ActionController::Base
13 13 unless environment.access_control_allow_methods.blank?
14 14 response.headers["Access-Control-Allow-Methods"] = environment.access_control_allow_methods
15 15 end
  16 + response.headers["Access-Control-Allow-Credentials"] = 'true'
16 17 elsif environment.restrict_to_access_control_origins
17 18 render_access_denied _('Origin not in allowed.')
18 19 end
... ...