7 Commits

Author	SHA1	Message	Date
Alexander Reelsen	bd0eb32d9c	CORS: Disable by default ... In order to deliver a more secure out-of-the-box configuration this commit disables cross-origin resource sharing by default. Closes #7151	2014-09-09 11:09:03 +02:00
Alexander Reelsen	35e67c84fa	CORS: Allowed to configure allow-credentials header to work via SSL ... This adds support to return the "Access-Control-Allow-Credentials" header if needed, so CORS will work flawlessly with authenticated applications. Closes #6380	2014-08-05 17:33:06 +02:00
Alexander Reelsen	a1e335b1e9	CORS: Support regular expressions for origin to match against ... This commit adds regular expression support for the allow-origin header depending on the value of the request `Origin` header. The existing HttpRequestBuilder is also extended to support the OPTIONS HTTP method. Relates #5601 Closes #6891	2014-07-25 10:51:22 +02:00
Volker Fröhlich	06192686a2	[DOCS] Fixd typo in http.asciidoc	2014-06-16 10:42:34 +02:00
Alex Brasetvik	cd8ed388d9	Document http.cors-settings	2014-03-31 11:34:46 +02:00
Konrad Feldmeier	d7b0d547d4	[DOCS] Multiple doc fixes ... Closes #5047	2014-03-07 14:24:58 +01:00
Clinton Gormley	822043347e	Migrated documentation into the main repo	2013-08-29 01:24:34 +02:00