From dcc3bc97d6ba879629bacd56093d31bf4a243e16 Mon Sep 17 00:00:00 2001 From: Adrian Hinz Date: Wed, 28 Jun 2017 14:12:02 +0200 Subject: [PATCH] Signed-off-by: Adrian Hinz --- app/controllers/application_controller.rb | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/app/controllers/application_controller.rb b/app/controllers/application_controller.rb index 399b368..adf2d98 100644 --- a/app/controllers/application_controller.rb +++ b/app/controllers/application_controller.rb @@ -10,9 +10,9 @@ class ApplicationController < ActionController::Base end def set_headers - headers['Access-Control-Allow-Origin'] = '*' + headers['Access-Control-Allow-Origin'] = 'lvh.me' headers['Access-Control-Allow-Methods'] = 'POST, PUT, DELETE, GET, OPTIONS' - headers['Access-Control-Request-Method'] = '*' + headers['Access-Control-Request-Method'] = 'lvh.me' headers['Access-Control-Allow-Headers'] = 'Origin, X-Requested-With, Content-Type, Accept, Authorization' end