Permit x-auth-token in Access-Control-Allow-Headers (#6894)
Fixes #6893
Chris Akritidis committed
Sep 19, 2019 at 22:29 UTC
2abbdb532a11aab3670898af0c364fe9c7d3092a
1 file changed
+1
-1
web/server/web_client.c
+1
-1
@@ -1212,7 +1212,7 @@ static inline void web_client_send_http_header(struct web_client *w) {
1212
if(w->mode == WEB_CLIENT_MODE_OPTIONS) {
1213
buffer_strcat(w->response.header_output,
1214
"Access-Control-Allow-Methods: GET, OPTIONS\r\n"
1215
- "Access-Control-Allow-Headers: accept, x-requested-with, origin, content-type, cookie, pragma, cache-control\r\n"
1215
+ "Access-Control-Allow-Headers: accept, x-requested-with, origin, content-type, cookie, pragma, cache-control, x-auth-token\r\n"
1216
"Access-Control-Max-Age: 1209600\r\n" // 86400 * 14
1217
);
1218
}