From 8a1923988d2aef595f12f93c560a09b9e593d94e Mon Sep 17 00:00:00 2001 From: Christian Richter Date: Tue, 19 Mar 2024 13:59:40 +0100 Subject: [PATCH] add changelog Signed-off-by: Christian Richter --- changelog/unreleased/improve-cors.md | 7 +++++++ 1 file changed, 7 insertions(+) create mode 100644 changelog/unreleased/improve-cors.md diff --git a/changelog/unreleased/improve-cors.md b/changelog/unreleased/improve-cors.md new file mode 100644 index 0000000000..c659f13585 --- /dev/null +++ b/changelog/unreleased/improve-cors.md @@ -0,0 +1,7 @@ +Enhancement: Change Cors default settings + +We have changed the default CORS settings to set `Access-Control-Allow-Origin` to the `OCIS_URL` if not explicitely set +and `Access-Control-Allow-Credentials` to `false` if not explicitely set. + +https://github.com/owncloud/ocis/pull/8518 +https://github.com/owncloud/ocis/issues/8514