fix Access-Control-Allow-Headers to match exact
This commit is contained in:
@@ -132,7 +132,7 @@ function handleParseHeaders(req, res, next) {
|
|||||||
var allowCrossDomain = function(req, res, next) {
|
var allowCrossDomain = function(req, res, next) {
|
||||||
res.header('Access-Control-Allow-Origin', '*');
|
res.header('Access-Control-Allow-Origin', '*');
|
||||||
res.header('Access-Control-Allow-Methods', 'GET,PUT,POST,DELETE,OPTIONS');
|
res.header('Access-Control-Allow-Methods', 'GET,PUT,POST,DELETE,OPTIONS');
|
||||||
res.header('Access-Control-Allow-Headers', '*');
|
res.header('Access-Control-Allow-Headers', 'X-Parse-REST-API-Key, X-Parse-Javascript-Key, X-Parse-Application-Id, X-Parse-Client-Version, X-Parse-Session-Token, X-Requested-With, X-Parse-Revocable-Session, Content-Type');
|
||||||
|
|
||||||
// intercept OPTIONS method
|
// intercept OPTIONS method
|
||||||
if ('OPTIONS' == req.method) {
|
if ('OPTIONS' == req.method) {
|
||||||
|
|||||||
Reference in New Issue
Block a user