# HG changeset patch
# User Emmanuel Gil Peyrot <linkmauve@linkmauve.fr>
# Date 1542562717 -3600
# Node ID 765735bb590bb80052f613523489d5b6acdb93ff
# Parent  f1c1f6bc4892082f849c79fc2181742414e801dd
mod_http_upload: Disallow POST in CORS

diff -r f1c1f6bc4892 -r 765735bb590b mod_http_upload/mod_http_upload.lua
--- a/mod_http_upload/mod_http_upload.lua	Sun Nov 18 18:36:16 2018 +0100
+++ b/mod_http_upload/mod_http_upload.lua	Sun Nov 18 18:38:37 2018 +0100
@@ -232,7 +232,7 @@
 -- http service
 local function set_cross_domain_headers(response)
         local headers = response.headers;
-        headers.access_control_allow_methods = "GET, PUT, POST, OPTIONS";
+        headers.access_control_allow_methods = "GET, PUT, OPTIONS";
         headers.access_control_allow_headers = "Content-Type";
         headers.access_control_max_age = "7200";
         headers.access_control_allow_origin = response.request.headers.origin or "*";