Update the CORS configuration

alextselegidis · Aug 2, 2023 · 93e5364 · 93e5364
1 parent 007145e
commit 93e5364
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/application/config/routes.php b/application/config/routes.php
@@ -82,7 +82,9 @@
 |
 */
 
-header('Access-Control-Allow-Origin: *'); // NOTICE: Change this header to restrict CORS access.
+header('Access-Control-Allow-Origin: ' . ($_SERVER['HTTP_ORIGIN'] ?? '*')); // NOTICE: Change this header to restrict CORS access.
+
+header('Access-Control-Allow-Credentials: "true"');
 
 if (isset($_SERVER['HTTP_ACCESS_CONTROL_REQUEST_METHOD']))
 {