Software / code / prosody-modules
Changeset
3380:765735bb590b
mod_http_upload: Disallow POST in CORS
| author | Emmanuel Gil Peyrot <linkmauve@linkmauve.fr> |
|---|---|
| date | Sun, 18 Nov 2018 18:38:37 +0100 |
| parents | 3379:f1c1f6bc4892 |
| children | 3381:861ddc74edd9 |
| files | mod_http_upload/mod_http_upload.lua |
| diffstat | 1 files changed, 1 insertions(+), 1 deletions(-) [+] |
line wrap: on
line diff
--- a/mod_http_upload/mod_http_upload.lua Sun Nov 18 18:36:16 2018 +0100 +++ b/mod_http_upload/mod_http_upload.lua Sun Nov 18 18:38:37 2018 +0100 @@ -232,7 +232,7 @@ -- http service local function set_cross_domain_headers(response) local headers = response.headers; - headers.access_control_allow_methods = "GET, PUT, POST, OPTIONS"; + headers.access_control_allow_methods = "GET, PUT, OPTIONS"; headers.access_control_allow_headers = "Content-Type"; headers.access_control_max_age = "7200"; headers.access_control_allow_origin = response.request.headers.origin or "*";
