Commit 02b89ac9 authored by Tristan Cavelier's avatar Tristan Cavelier Committed by Eteri

erp5_web: add Vary Origin to hateoas

This fixes an issue :
When we work on two web apps in two different domains
but using the same erp5 as storage backend,
the allow origin response header was equal to one sole
domain for the two web apps.
parent bb0e6ce5
...@@ -263,7 +263,7 @@ ...@@ -263,7 +263,7 @@
</item> </item>
<item> <item>
<key> <string>_vary</string> </key> <key> <string>_vary</string> </key>
<value> <string>Cookie, Authorization</string> </value> <value> <string>Cookie, Authorization, Origin</string> </value>
</item> </item>
</dictionary> </dictionary>
</state> </state>
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment