Commit dfd37887 authored by Tristan Cavelier's avatar Tristan Cavelier

erp5_web: add Vary Origin to hateoas

This fixes an issue :
When we work on two web apps in two different domains
but using the same erp5 as storage backend,
the allow origin response header was equal to one sole
domain for the two web apps.
parent 65ca95b6
...@@ -263,7 +263,7 @@ ...@@ -263,7 +263,7 @@
</item> </item>
<item> <item>
<key> <string>_vary</string> </key> <key> <string>_vary</string> </key>
<value> <string>Cookie, Authorization</string> </value> <value> <string>Cookie, Authorization, Origin</string> </value>
</item> </item>
</dictionary> </dictionary>
</state> </state>
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment