Only set API CORS headers in development
All checks were successful
continuous-integration/drone/push Build is passing
All checks were successful
continuous-integration/drone/push Build is passing
In production, this is the reverse proxy's responsibility
This commit is contained in:
parent
fafc5d8f6f
commit
281938dd64
@ -29,6 +29,7 @@ class Api::BtcpayController < Api::BaseController
|
||||
end
|
||||
|
||||
def set_cors_access_control_headers
|
||||
return unless Rails.env.development?
|
||||
headers['Access-Control-Allow-Origin'] = "*"
|
||||
headers['Access-Control-Allow-Headers'] = "*"
|
||||
headers['Access-Control-Allow-Methods'] = "GET"
|
||||
|
Loading…
x
Reference in New Issue
Block a user