nas/todo_api
2
1
Fork 0
Code Issues 1 Pull requests Releases Wiki Activity

Improve CSRF handling

Browse source
This commit is contained in:
Maurits van der Schee 2017-02-17 01:20:14 +01:00
commit bef88a9c8b
1 changed files with 1 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
api.php
View file

@ -1102,7 +1102,7 @@ class PHP_CRUD_API {
protected function headersCommand($parameters) {
$headers = array();
$headers[]='Access-Control-Allow-Headers: Content-Type';
$headers[]='Access-Control-Allow-Headers: Content-Type, X-XSRF-Token';
$headers[]='Access-Control-Allow-Methods: OPTIONS, GET, PUT, POST, DELETE, PATCH';
$headers[]='Access-Control-Allow-Credentials: true';
$headers[]='Access-Control-Max-Age: 1728000';