TRKJ/gitea
2
0
Fork 0
mirror of https://gitee.com/gitea/gitea synced 2025-11-04 08:30:25 +08:00
Code Issues Packages Projects Releases Wiki Activity

Fix incorrect CORS default values (#24206)

Browse Source 
Document: 

```
;ALLOW_DOMAIN = *
;METHODS = GET,HEAD,POST,PUT,PATCH,DELETE,OPTIONS
```

Co-authored-by: Giteabot <teabot@gitea.io>
This commit is contained in:
wxiaoguang
2023-04-20 03:30:10 +08:00
committed by GitHub
parent 52b17bfa07
commit 94210633ae
1 changed files with 3 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
modules/setting/cors.go
View File

@@ -21,9 +21,10 @@ var CORSConfig = struct {
Headers []string Headers []string
XFrameOptions string XFrameOptions string
}{ }{
Enabled: false, AllowDomain: []string{"*"},
MaxAge: 10 * time.Minute, Methods: []string{"GET", "HEAD", "POST", "PUT", "PATCH", "DELETE", "OPTIONS"},
Headers: []string{"Content-Type", "User-Agent"}, Headers: []string{"Content-Type", "User-Agent"},
MaxAge: 10 * time.Minute,
XFrameOptions: "SAMEORIGIN", XFrameOptions: "SAMEORIGIN",
} }