Unverified Commit d9648738 authored by Szymon Zmilczak's avatar Szymon Zmilczak Committed by GitHub

Added more inclusive CORS policy (#4767)

parent 7e8993fc
......@@ -412,6 +412,8 @@ void WebServer::_prepareHeader(String& response, int code, const char* content_t
}
if (_corsEnabled) {
sendHeader(String(FPSTR("Access-Control-Allow-Origin")), String("*"));
sendHeader(String(FPSTR("Access-Control-Allow-Methods")), String("*"));
sendHeader(String(FPSTR("Access-Control-Allow-Headers")), String("*"));
}
sendHeader(String(F("Connection")), String(F("close")));
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment