gaja-group
/
server-configs-nginx
mirror of https://github.com/h5bp/server-configs-nginx
2
0
Fork 0
Code Issues Releases Wiki Activity

Don't use invalid examples 

A wildcard subdomain isn't valid syntax for a ACAO header
This commit is contained in:
Andy Dawson 2015-05-29 15:32:23 +02:00
parent b674df5545
commit fce0e368c1
1 changed files with 2 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
h5bp/directive-only/cross-domain-insecure.conf
View File

@ -1,5 +1,7 @@
# Cross domain AJAX requests # Cross domain AJAX requests
# http://www.w3.org/TR/cors/#access-control-allow-origin-response-header
# **Security Warning** # **Security Warning**
# Do not use this without understanding the consequences. # Do not use this without understanding the consequences.
# This will permit access from any other website. # This will permit access from any other website.
@ -10,6 +12,3 @@ add_header "Access-Control-Allow-Origin" "*";
# #
# Allow access based on [sub]domain: # Allow access based on [sub]domain:
# add_header "Access-Control-Allow-Origin" "subdomain.example.com"; # add_header "Access-Control-Allow-Origin" "subdomain.example.com";
# OR
# add_header "Access-Control-Allow-Origin" "*.example.com";