FIX: add Discourse-Visible to CORS allowed headers for sites that use a proxy

2017-03-06 14:41:57 -05:00 · 2017-03-06 14:41:57 -05:00 · f9aae7af6a
parent 954d75f81c
commit f9aae7af6a
1 changed files with 1 additions and 1 deletions
--- a/config/initializers/008-rack-cors.rb
+++ b/config/initializers/008-rack-cors.rb
@ -29,7 +29,7 @@ if GlobalSetting.enable_cors
        end

        headers['Access-Control-Allow-Origin'] = origin || cors_origins[0]
-        headers['Access-Control-Allow-Headers'] = 'X-Requested-With, X-CSRF-Token'
+        headers['Access-Control-Allow-Headers'] = 'X-Requested-With, X-CSRF-Token, Discourse-Visible'
        headers['Access-Control-Allow-Credentials'] = 'true'
      end