Jump to: navigation, search

Web Engagement Cluster:web:cors-allowedOrigins
(Rpfeiffer used the OptionPublish action.)
 
(3 intermediate revisions by the same user not shown)
Line 1: Line 1:
 
{{PubOption
 
{{PubOption
 
|hidden=false
 
|hidden=false
−
|default=*
+
|default=*
 
|valid=See the explanation in the description.
 
|valid=See the explanation in the description.
 
|takeseffect=After server restart
 
|takeseffect=After server restart
−
|shortdesc=A comma-separated list of origins that are allowed to access the resources. The default value is <tt>*</tt>, meaning all origins. If an allowed origin contains one or more <tt>*</tt> characters (for example <tt>http://*.domain.com</tt>), then <tt>*</tt> characters are converted to <tt>.*</tt>, <tt>.</tt> characters are escaped to <tt>\.</tt>, and the resulting allowed origin is interpreted as a regular expression. Allowed origins can therefore be more complex expressions such as <tt>https?://*.domain.[a-z]{3}</tt>, which matches either <tt>http</tt> or <tt>https</tt>, multiple subdomains, and any 3 letter top-level domain, such as <tt>.com</tt>, <tt>.net</tt>, or <tt>.org</tt>.
+
|shortdesc=A comma-separated list of origins that are allowed to access the resources. The default value is <tt>*</tt>, meaning all origins. If an allowed origin contains one or more <tt>*</tt> characters (for example <tt>http&#058;//*.domain.com</tt>), then <tt>*</tt> characters are converted to <tt>.*</tt>, <tt>.</tt> characters are escaped to <tt>\.</tt>, and the resulting allowed origin is interpreted as a regular expression. Allowed origins can therefore be more complex expressions such as <tt>https?://*.domain.[a-z]{3}</tt>, which matches either <tt>http</tt> or <tt>https</tt>, multiple subdomains, and any 3 letter top-level domain, such as <tt>.com</tt>, <tt>.net</tt>, or <tt>.org</tt>.
 
}}
 
}}
 
{{DraftOption
 
{{DraftOption
−
|hidden=false
 
−
|default=*
 
−
|valid=See the explanation in the description.
 
−
|takeseffect=After server restart
 
−
|shortdesc=A comma-separated list of origins that are allowed to access the resources. The default value is <tt>*</tt>, meaning all origins. If an allowed origin contains one or more <tt>*</tt> characters (for example <tt>http&#058;//*.domain.com</tt>), then <tt>*</tt> characters are converted to <tt>.*</tt>, <tt>.</tt> characters are escaped to <tt>\.</tt>, and the resulting allowed origin is interpreted as a regular expression. Allowed origins can therefore be more complex expressions such as <tt>https?://*.domain.[a-z]{3}</tt>, which matches either <tt>http</tt> or <tt>https</tt>, multiple subdomains, and any 3 letter top-level domain, such as <tt>.com</tt>, <tt>.net</tt>, or <tt>.org</tt>.
 
 
}}
 
}}
 
{{PubExtended}}
 
{{PubExtended}}
−
{{DraftExtended}}
+
{{DraftExtended
 +
}}
 
{{OptionCreate
 
{{OptionCreate
 
|component=Web_Engagement_Cluster
 
|component=Web_Engagement_Cluster

Latest revision as of 01:09, March 22, 2018


View in ref guide.

Edit this option          Publish this option          Clear draft content


Published Option

cors.allowedOrigins

Default Value: *
Valid Values: See the explanation in the description.
Changes Take Effect: After server restart


A comma-separated list of origins that are allowed to access the resources. The default value is *, meaning all origins. If an allowed origin contains one or more * characters (for example http://*.domain.com), then * characters are converted to .*, . characters are escaped to \., and the resulting allowed origin is interpreted as a regular expression. Allowed origins can therefore be more complex expressions such as https?://*.domain.[a-z]{3}, which matches either http or https, multiple subdomains, and any 3 letter top-level domain, such as .com, .net, or .org.

Draft Option

No draft option

This page was last edited on March 22, 2018, at 01:09.
Comments or questions about this documentation? Contact us for support!