Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Already on GitHub? Sign in to your account

Disable CORS by default #1306

davidfowl opened this Issue Jan 11, 2013 · 1 comment


None yet
2 participants

davidfowl commented Jan 11, 2013

Add a flag to ConnectionConfiguration.

@ghost ghost assigned davidfowl Jan 11, 2013

davidfowl added a commit that referenced this issue Jan 12, 2013

Disable cross domain requests by default.
- Added EnableCrossDomain flag to ConnectionConfiguration.
- Reject JSONP and cross domain requests with the origin header by default
  if EnableCrossDomain isn't true.
- Refactored HubDispatcherHandler and PersistentConnectionHandler to take
  respective configuration objects.


Xiaohongt commented Jan 13, 2013


@Xiaohongt Xiaohongt closed this Jan 13, 2013

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment