Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Already on GitHub? Sign in to your account

Disable CORS by default #1306

Closed
davidfowl opened this Issue Jan 11, 2013 · 1 comment

Comments

Projects
None yet
2 participants
Owner

davidfowl commented Jan 11, 2013

Add a flag to ConnectionConfiguration.

@ghost ghost assigned davidfowl Jan 11, 2013

davidfowl added a commit that referenced this issue Jan 12, 2013

Disable cross domain requests by default.
- Added EnableCrossDomain flag to ConnectionConfiguration.
- Reject JSONP and cross domain requests with the origin header by default
  if EnableCrossDomain isn't true.
- Refactored HubDispatcherHandler and PersistentConnectionHandler to take
  respective configuration objects.

#1306
Contributor

Xiaohongt commented Jan 13, 2013

verified

@Xiaohongt Xiaohongt closed this Jan 13, 2013

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment