fix(cors): Allow all origins to support 3rd party tools (#13383)

This commit is contained in:
Nat Welch
2021-08-26 19:12:11 -04:00
committed by GitHub
parent 9a2df5c1e5
commit 7870ffece8

View File

@@ -1,6 +1,6 @@
export default function corsMiddleware (req, res, next) {
res.set({
'Access-Control-Allow-Origin': req.header('origin') || '*',
'Access-Control-Allow-Origin': '*',
'Access-Control-Allow-Methods': 'OPTIONS,GET,POST,PUT,HEAD,DELETE',
'Access-Control-Allow-Headers': 'Authorization,Content-Type,Accept,Content-Encoding,X-Requested-With,x-api-user,x-api-key,x-client',
// Expose rate limit headers to CORS requests