provide more default cors settings

plone · Nov 28, 2016 · fb2c61b · fb2c61b
1 parent b48a808
commit fb2c61b
Showing 1 changed file with 8 additions and 1 deletion.
diff --git a/src/plone.server/plone/server/__init__.py b/src/plone.server/plone/server/__init__.py
@@ -30,7 +30,14 @@
     'default_permission': '',
     'available_addons': {},
     'api_definition': {},
-    'cors': {},
+    'cors': {
+        "allow_origin": [],
+        "allow_methods": ["GET", "POST", "DELETE", "HEAD", "PATCH"],
+        "allow_headers": [],
+        "expose_headers": [],
+        "allow_credentials": True,
+        "max_age": 3660
+    },
     'jwt': {
         'secret': 'foobar',
         'algorithm': 'HS256'