2
0
mirror of https://github.com/fhem/fhem-mirror.git synced 2025-03-10 09:16:53 +00:00

01_FHEMWEB:pm: CORS fix for csrfToken Header (Forum #67848)

git-svn-id: https://svn.fhem.de/fhem/trunk@13548 2b470e98-0d58-463d-a4d8-8e2adae1ed80
This commit is contained in:
rudolfkoenig 2017-02-28 19:40:41 +00:00
parent c5bd4cf45a
commit 6a51ae390e

View File

@ -422,7 +422,8 @@ FW_Read($$)
"Access-Control-Allow-Methods: GET POST OPTIONS\r\n".
"Access-Control-Allow-Headers: Origin, Authorization, Accept\r\n".
"Access-Control-Allow-Credentials: true\r\n".
"Access-Control-Max-Age:86400\r\n" : "");
"Access-Control-Max-Age:86400\r\n".
"Access-Control-Expose-Headers: X-FHEM-csrfToken\r\n": "");
$FW_headerlines .= "X-FHEM-csrfToken: $defs{$FW_wname}{CSRFTOKEN}\r\n"
if($defs{$FW_wname}{CSRFTOKEN});