MyFavMirrors/minio
1
0
Fork 0
mirror of https://github.com/minio/minio.git synced 2025-03-03 07:10:07 -05:00
Code Issues Packages Projects Releases Wiki Activity

Add necessary safe headers under CORS (#5750)

Browse Source 
Fixes #5748
This commit is contained in:
Harshavardhana 2018-04-02 17:51:32 -07:00 committed by kannappanr
parent 8eb838bf91
commit b052bfa79e
1 changed files with 12 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
cmd/generic-handlers.go
View File

@ -375,9 +375,18 @@ var defaultAllowableHTTPMethods = []string{
// setCorsHandler handler for CORS (Cross Origin Resource Sharing) // setCorsHandler handler for CORS (Cross Origin Resource Sharing)
func setCorsHandler(h http.Handler) http.Handler { func setCorsHandler(h http.Handler) http.Handler {
commonS3Headers := []string{"Content-Length", "Content-Type", "Connection", commonS3Headers := []string{
"Date", "ETag", "Server", "x-amz-delete-marker", "x-amz-id-2", "Date",
"x-amz-request-id", "x-amz-version-id"} "ETag",
"Server",
"Connection",
"Accept-Ranges",
"Content-Range",
"Content-Encoding",
"Content-Length",
"Content-Type",
"x-amz-request-id",
}
c := cors.New(cors.Options{ c := cors.New(cors.Options{
AllowedOrigins: []string{"*"}, AllowedOrigins: []string{"*"},
AllowedMethods: defaultAllowableHTTPMethods, AllowedMethods: defaultAllowableHTTPMethods,