jaymode 6b086dc7db change CORS allow origin default to allow no origins ...

Today, we disable CORS by default, but if a user simply enables CORS their instance of
elasticsearch will allow cross origin requests from anywhere, as the default value for allowed
origins is `*`.

This changes the default to be `null` so that no origins are allowed and the user must explicitly
specify the origins they wish to allow requests from. The documentation also mentions that there
is a security risk in using `*` as the value.

Closes #11169

2015-06-26 10:59:15 -04:00

..

cluster

Docs: Refactored modules and index modules sections

2015-06-22 23:49:45 +02:00

discovery

[DOCS] clarify no-master-block docs

2015-03-20 15:58:16 +01:00

indices

Docs: Refactored modules and index modules sections

2015-06-22 23:49:45 +02:00

advanced-scripting.asciidoc

Docs: Refactored modules and index modules sections

2015-06-22 23:49:45 +02:00

cluster.asciidoc

Docs: Refactored modules and index modules sections

2015-06-22 23:49:45 +02:00

discovery.asciidoc

[DOCS] add azure and gce discovery plugins

2014-02-06 09:18:42 +01:00

gateway.asciidoc

Docs: Refactored modules and index modules sections

2015-06-22 23:49:45 +02:00

http.asciidoc

change CORS allow origin default to allow no origins

2015-06-26 10:59:15 -04:00

indices.asciidoc

Docs: Refactored modules and index modules sections

2015-06-22 23:49:45 +02:00

memcached.asciidoc

[DOCS] Multiple doc fixes

2014-03-07 14:24:58 +01:00

network.asciidoc

Default to binding to loopback address

2015-06-04 10:25:49 -06:00

node.asciidoc

Migrated documentation into the main repo

2013-08-29 01:24:34 +02:00

plugins.asciidoc

Update plugins.asciidoc

2015-06-23 21:53:25 +02:00

scripting.asciidoc

Docs: Updated groovy docs link

2015-06-15 11:15:57 +02:00

snapshots.asciidoc

Convert curl examples to Sense for snapshot restore

2015-06-19 18:08:04 +02:00

threadpool.asciidoc

Docs: Refactored modules and index modules sections

2015-06-22 23:49:45 +02:00

thrift.asciidoc

Docs: Update thrift.asciidoc

2014-09-24 20:50:30 +02:00

transport.asciidoc

Docs: Updated version annotations in master

2015-04-09 14:50:11 +02:00

tribe.asciidoc

Docs: Removed all the added/deprecated tags from 1.x

2014-09-26 21:04:42 +02:00