Mercurial > prosody-modules

diff mod_http_upload/mod_http_upload.lua @ 3380:765735bb590b

Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
mod_http_upload: Disallow POST in CORS
author Emmanuel Gil Peyrot <linkmauve@linkmauve.fr>
date Sun, 18 Nov 2018 18:38:37 +0100
parents f1c1f6bc4892
children a5a50cd34386
line wrap: on
line diff
--- a/mod_http_upload/mod_http_upload.lua	Sun Nov 18 18:36:16 2018 +0100
+++ b/mod_http_upload/mod_http_upload.lua	Sun Nov 18 18:38:37 2018 +0100
@@ -232,7 +232,7 @@
 -- http service
 local function set_cross_domain_headers(response)
         local headers = response.headers;
-        headers.access_control_allow_methods = "GET, PUT, POST, OPTIONS";
+        headers.access_control_allow_methods = "GET, PUT, OPTIONS";
         headers.access_control_allow_headers = "Content-Type";
         headers.access_control_max_age = "7200";
         headers.access_control_allow_origin = response.request.headers.origin or "*";