Adrian Smith 89ee10bd92 Add handler for CORS "actual requests"
Fix for bug 1095130

* Added a wrapper function around public methods to handle
  CORS actual requests. These requests need to return some
  extra headers to be valid responses to a CORS request.
  Access-Control-Expose-Headers and Access-Control-Allow-Origin.

* Added support for the CORS header Access-Control-Expose-Headers.

* Some refactoring of the OPTIONS method so the
  "is_origin_allowed" logic can be reused.

* Added a little extra detail to the CORS documentation.

DocImpact

Change-Id: I68538e472a900775427f21a8a59e738a83dcc8bc
2013-01-23 19:31:18 +00:00
..
2012-04-23 10:48:24 -05:00
2010-07-12 17:03:45 -05:00
2011-02-24 15:01:22 -08:00
2010-07-12 17:03:45 -05:00
2012-10-23 14:48:59 -05:00
2010-07-12 17:03:45 -05:00
2010-07-12 17:03:45 -05:00
2010-07-12 17:03:45 -05:00