Sunday, June 26, 2022

Re: httpd(8) - Cross-Origin Resource Sharing (CORS) header

On 2022-06-27, David Rinehart <wdaver@cox.net> wrote:
> Is there a way to add a CORS header to httpd(8) responses for static
> content?

No.

> I see three options:
>     1. Create a diff that adds a server CORS property to httpd.conf(5).
>     2. Create a diff that adds generic header NVPs to httpd.conf(5).
>     3. Create a local patch to hard code the header, along with existing
> headers.
>
> If there is not an existing solution, is there any interest in adding
> the CORS header as a feature of httpd(8)?

2 was rejected before when I suggested using it instead of the dedicated
keywords that are already there for adding HSTS headers, but maybe
things are different now.


--
Please keep replies on the mailing list.

No comments:

Post a Comment