openstack/security-doc
Code Issues Proposed changes
Files
master
security-doc/security-guide/source/dashboard/cross-origin-resource-sharing-cors.rst
Andreas Jaeger fac521a9ec Moving RST format to main security-guide folder 
This updates all scripts as well.

For further cleanup, changes for project-config (removal of jobs) and
openstack-manuals (stop sync of DocBook XML files) are needed first.

Implements: bp sec-guide-rst
Co-Authored-By: Andreas Jaeger <aj@suse.de>
Change-Id: I003f56c6d804f70cc74395bd947b053eb4cea769
2015-08-12 06:59:51 +02:00

342 B
Raw Permalink Blame History

Cross Origin Resource Sharing (CORS)

Configure your web server to send a restrictive CORS header with each response, allowing only the dashboard domain and protocol:

Access-Control-Allow-Origin: https://example.com/

Never allow the wild card origin.