note X-Requested-With header in pod

haarg · Sep 21, 2010 · 5b298d5 · 5b298d5
1 parent f6cbfaa
commit 5b298d5
Showing 1 changed file with 6 additions and 3 deletions.
diff --git a/lib/Plack/Middleware/CrossOrigin.pm b/lib/Plack/Middleware/CrossOrigin.pm
@@ -136,12 +136,15 @@ to allow XMLHttpRequests across domains.
 
 =item origins
 
-A list of allowed origins.  '*' can be specified to allow access from
-any origin.
+A list of allowed origins.  '*' can be specified to allow access
+from any origin.
 
 =item headers
 
-A list of allowed headers.  '*' can be specified to allow any headers.
+A list of allowed headers.  '*' can be specified to allow any
+headers.  Many AJAX frameworks add the C<X-Requested-With> header to
+requests they make, so it is recommended that at least header be
+allowed.
 
 =item methods