Merge pull request #81 from w3c/add-cors-headers

Add CORS headers for scripted cross-origin access
w3c · Oct 22, 2017 · 1d9576a · 1d9576a
2 parents 91c3a0d + c3cc1b2
commit 1d9576a
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/org/w3c/css/servlet/CssValidator.java b/org/w3c/css/servlet/CssValidator.java
@@ -851,6 +851,10 @@ private void buildHeader(ApplContext ac, HttpServletResponse res,
 			res.setHeader("charset", Utf8Properties.ENCODING);
 		}
 		res.setHeader("Vary", "Accept-Language");
+		res.setHeader("Access-Control-Allow-Origin", "*");
+		res.setHeader("Access-Control-Allow-Headers", "content-type,accept-charset");
+		res.setHeader("Access-Control-Allow-Methods", "GET, HEAD, POST, OPTIONS");
+		res.setHeader("Access-Control-Max-Age", "600");
 	}
 
 	private void handleError(HttpServletResponse res, ApplContext ac,