Closed svvitale closed 6 years ago
… in the CORS header.
It took me a little while to figure out that EVENTSTREAM_ALLOW_ORIGIN was required for my setup. This change defaults the CORS header to use the ALLOWED_HOSTS value, but still prefers (and documents) the new EVENTSTREAM_ALLOW_ORIGIN setting.
This still needs a little refinement. One more commit coming soon.
… in the CORS header.
It took me a little while to figure out that EVENTSTREAM_ALLOW_ORIGIN was required for my setup. This change defaults the CORS header to use the ALLOWED_HOSTS value, but still prefers (and documents) the new EVENTSTREAM_ALLOW_ORIGIN setting.