mirror of
https://gitee.com/gitea/gitea
synced 2025-12-10 18:20:33 +08:00
Set AllowedHeaders on API CORS handler and add missing Access-Control-Expose-Headers to pull API. Fix #16100 Signed-off-by: Andrew Thornton <art27@cantab.net>