tested different CORS headers

TUM-Dev · Jan 14, 2024 · 6c0d8c7 · 6c0d8c7
1 parent 9ca7ec0
commit 6c0d8c7
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 0 deletions.
diff --git a/data/nginx.conf b/data/nginx.conf
@@ -29,6 +29,9 @@ http {
     gzip_static on;
     gzip_vary on;
 
+    # we allow other sites to fetch from us as we don't have any login/.. functionality => no cookies
+    add_header Access-Control-Allow-Origin *;
+
     location = /cdn/health {
       access_log off;
       add_header Content-Type text/plain;

diff --git a/webclient/nginx.conf b/webclient/nginx.conf
@@ -38,6 +38,9 @@ http {
 
     root /app;
 
+    # we allow other sites to fetch from us as we don't have any login/.. functionality => no cookies
+    add_header Access-Control-Allow-Origin *;
+
     # metadata
     location = /robots.txt { access_log off; }
     location = /googlebef9161f1176c5e0.html { access_log off; return 200 'google-site-verification: googlebef9161f1176c5e0.html'; } # google search console