Closed skinkie closed 12 years ago
Probably need a setting to turn CORS on/of and configure which domains are allowed to do CORS.
This is very cool and thanks. I'll merge it once there is a way to turn CORS off. I would hate to have this be the default setting as others might not want to open up the pre bind to all requests.
You know that the default setting of ejabberd is to allow all? And it being hardcoded? I wouldn't know why you would like to be stricter than the server you are working from.
Looks like ejabberd needs to be changed too. :)