|
|
Line 7: |
Line 7: |
| }} | | }} |
| {{DraftOption | | {{DraftOption |
− | |hidden=false
| |
− | |default=*
| |
− | |valid=See the explanation in the description.
| |
− | |takeseffect=After server restart
| |
− | |shortdesc=A comma-separated list of origins that are allowed to access the resources. The default value is <tt>*</tt>, meaning all origins. If an allowed origin contains one or more <tt>*</tt> characters (for example <tt>http://*.domain.com</tt>), then <tt>*</tt> characters are converted to <tt>.*</tt>, <tt>.</tt> characters are escaped to <tt>\.</tt>, and the resulting allowed origin is interpreted as a regular expression. Allowed origins can therefore be more complex expressions such as <tt>https?://*.domain.[a-z]{3}</tt>, which matches either <tt>http</tt> or <tt>https</tt>, multiple subdomains, and any 3 letter top-level domain, such as <tt>.com</tt>, <tt>.net</tt>, or <tt>.org</tt>.
| |
| }} | | }} |
| {{PubExtended}} | | {{PubExtended}} |
− | {{DraftExtended}} | + | {{DraftExtended |
| + | }} |
| {{OptionCreate | | {{OptionCreate |
| |component=Web_Engagement_Cluster | | |component=Web_Engagement_Cluster |
Latest revision as of 01:09, March 22, 2018
View in ref guide.
Edit this option Publish this option Clear draft content
Published Option
cors.allowedOrigins
Default Value: *
Valid Values: See the explanation in the description.
Changes Take Effect: After server restart
A comma-separated list of origins that are allowed to access the resources. The default value is *, meaning all origins. If an allowed origin contains one or more * characters (for example http://*.domain.com), then * characters are converted to .*, . characters are escaped to \., and the resulting allowed origin is interpreted as a regular expression. Allowed origins can therefore be more complex expressions such as https?://*.domain.[a-z]{3}, which matches either http or https, multiple subdomains, and any 3 letter top-level domain, such as .com, .net, or .org.
Draft Option
No draft option