Only set API CORS headers in development
All checks were successful
continuous-integration/drone/push Build is passing
All checks were successful
continuous-integration/drone/push Build is passing
In production, this is the reverse proxy's responsibility
This commit is contained in:
parent
fafc5d8f6f
commit
281938dd64
@ -29,6 +29,7 @@ class Api::BtcpayController < Api::BaseController
|
|||||||
end
|
end
|
||||||
|
|
||||||
def set_cors_access_control_headers
|
def set_cors_access_control_headers
|
||||||
|
return unless Rails.env.development?
|
||||||
headers['Access-Control-Allow-Origin'] = "*"
|
headers['Access-Control-Allow-Origin'] = "*"
|
||||||
headers['Access-Control-Allow-Headers'] = "*"
|
headers['Access-Control-Allow-Headers'] = "*"
|
||||||
headers['Access-Control-Allow-Methods'] = "GET"
|
headers['Access-Control-Allow-Methods'] = "GET"
|
||||||
|
Loading…
x
Reference in New Issue
Block a user