mirror of
				https://github.com/firefly-iii/firefly-iii.git
				synced 2025-10-27 05:51:56 +00:00 
			
		
		
		
	
		
			
				
	
	
		
			55 lines
		
	
	
		
			1.7 KiB
		
	
	
	
		
			PHP
		
	
	
	
	
	
			
		
		
	
	
			55 lines
		
	
	
		
			1.7 KiB
		
	
	
	
		
			PHP
		
	
	
	
	
	
| <?php
 | |
| 
 | |
| /*
 | |
|  * cors.php
 | |
|  * Copyright (c) 2023 james@firefly-iii.org
 | |
|  *
 | |
|  * This file is part of Firefly III (https://github.com/firefly-iii).
 | |
|  *
 | |
|  * This program is free software: you can redistribute it and/or modify
 | |
|  * it under the terms of the GNU Affero General Public License as
 | |
|  * published by the Free Software Foundation, either version 3 of the
 | |
|  * License, or (at your option) any later version.
 | |
|  *
 | |
|  * This program is distributed in the hope that it will be useful,
 | |
|  * but WITHOUT ANY WARRANTY; without even the implied warranty of
 | |
|  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 | |
|  * GNU Affero General Public License for more details.
 | |
|  *
 | |
|  * You should have received a copy of the GNU Affero General Public License
 | |
|  * along with this program.  If not, see <https://www.gnu.org/licenses/>.
 | |
|  */
 | |
| 
 | |
| declare(strict_types=1);
 | |
| 
 | |
| return [
 | |
|     /*
 | |
|     |--------------------------------------------------------------------------
 | |
|     | Cross-Origin Resource Sharing (CORS) Configuration
 | |
|     |--------------------------------------------------------------------------
 | |
|     |
 | |
|     | Here you may configure your settings for cross-origin resource sharing
 | |
|     | or "CORS". This determines what cross-origin operations may execute
 | |
|     | in web browsers. You are free to adjust these settings as needed.
 | |
|     |
 | |
|     | To learn more: https://developer.mozilla.org/en-US/docs/Web/HTTP/CORS
 | |
|     |
 | |
|     */
 | |
| 
 | |
|     'paths'                    => ['api/*', 'sanctum/csrf-cookie'],
 | |
| 
 | |
|     'allowed_methods'          => ['*'],
 | |
| 
 | |
|     'allowed_origins'          => ['*'],
 | |
| 
 | |
|     'allowed_origins_patterns' => ['*'],
 | |
| 
 | |
|     'allowed_headers'          => ['*'],
 | |
| 
 | |
|     'exposed_headers'          => [],
 | |
| 
 | |
|     'max_age'                  => 0,
 | |
| 
 | |
|     'supports_credentials'     => false,
 | |
| ];
 |