search

monsur / enable-cors.org

Advocacy for CORS
http://enable-cors.org/
207 stars 98 forks source link

CORS in WCF #35

Open sathley opened 11 years ago

sathley commented 11 years ago

In the message inspector you have added the CORS headers in every call which is not required. Applying CORS headers only for OPTIONS calls would have done the trick as well. Plus you want to also specify the "Access-Control-Max-Age" header so as to cache the CORS call.

monsur commented 11 years ago

Hi Sushant. Thanks for the feedback. Would you be willing to pull together a patch? The relevant page is here: https://github.com/mhausenblas/enable-cors.org/blob/gh-pages/server_wcf.html