Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Add Access-Control-Expose-Headers in --cors mode #814

Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

Add Access-Control-Expose-Headers in --cors mode #814

wants to merge 1 commit into from

Commits on Oct 22, 2024

  1. Add Access-Control-Expose-Headers in --cors mode 

    By default, browsers only allow clients to read "CORS-safelisted response headers": https://developer.mozilla.org/en-US/docs/Glossary/CORS-safelisted_response_header

However, sometimes it is useful to read other headers that are not safelisted by default, such as `Accept-Ranges`. The `Access-Control-Expose-Headers` header allows controlling which headers are exposed to the client. https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Access-Control-Expose-Headers

This change exposes all headers when `--cors` is used.
    @jtbandes
    jtbandes authored Oct 22, 2024
    Configuration menu
    Copy the full SHA
    ef355b2 View commit details
    Browse the repository at this point in the history