Add user-defined CORS-settings for script files

S1SYPHOS · Oct 31, 2017 · 9d3c700 · 9d3c700
1 parent c0b9939
commit 9d3c700
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/core/js.php b/core/js.php
@@ -4,6 +4,7 @@
 
 use Asset;
 use f;
+use c;
 use html;
 
 class JS extends \Kirby\Component\JS {
@@ -51,7 +52,7 @@ public function tag($src, $async = false) {
     $attr = array(
       'src' => url($src),
       'integrity' => $jsIntegrity, // inject generated sri hash
-      'crossorigin' => 'anonymous'
+      'crossorigin' => c::get('sri-hash.use-credentials') ? 'use-credentials' : 'anonymous' // set user-defined 'crossorigin' attribute
     );
 
     if(is_array($async)) {