Don't use invalid examples
A wildcard subdomain isn't valid syntax for a ACAO header
This commit is contained in:
parent
b674df5545
commit
fce0e368c1
h5bp/directive-only
|
@ -1,5 +1,7 @@
|
|||
# Cross domain AJAX requests
|
||||
|
||||
# http://www.w3.org/TR/cors/#access-control-allow-origin-response-header
|
||||
|
||||
# **Security Warning**
|
||||
# Do not use this without understanding the consequences.
|
||||
# This will permit access from any other website.
|
||||
|
@ -10,6 +12,3 @@ add_header "Access-Control-Allow-Origin" "*";
|
|||
#
|
||||
# Allow access based on [sub]domain:
|
||||
# add_header "Access-Control-Allow-Origin" "subdomain.example.com";
|
||||
# OR
|
||||
# add_header "Access-Control-Allow-Origin" "*.example.com";
|
||||
|
||||
|
|
Loading…
Reference in New Issue