Don't use invalid examples

A wildcard subdomain isn't valid syntax for a ACAO header
This commit is contained in:
Andy Dawson 2015-05-29 15:32:23 +02:00
parent b674df5545
commit fce0e368c1
1 changed files with 2 additions and 3 deletions
h5bp/directive-only

View File

@ -1,5 +1,7 @@
# Cross domain AJAX requests
# http://www.w3.org/TR/cors/#access-control-allow-origin-response-header
# **Security Warning**
# Do not use this without understanding the consequences.
# This will permit access from any other website.
@ -10,6 +12,3 @@ add_header "Access-Control-Allow-Origin" "*";
#
# Allow access based on [sub]domain:
# add_header "Access-Control-Allow-Origin" "subdomain.example.com";
# OR
# add_header "Access-Control-Allow-Origin" "*.example.com";