Enable CORS headers for artifact media file requests
Fixes #495. Signed-off-by: Fabian P. Schmidt <kerel@mailbox.org>spacecruft
parent
37daecf507
commit
49ee559251
|
@ -387,7 +387,7 @@ SPECTACULAR_SETTINGS = {
|
||||||
SECRET_KEY = config('SECRET_KEY', default='changeme')
|
SECRET_KEY = config('SECRET_KEY', default='changeme')
|
||||||
SECURE_HSTS_SECONDS = config('SECURE_HSTS_SECONDS', default=31536000, cast=int)
|
SECURE_HSTS_SECONDS = config('SECURE_HSTS_SECONDS', default=31536000, cast=int)
|
||||||
CORS_ALLOW_ALL_ORIGINS = config('CORS_ALLOW_ALL_ORIGINS', default=True, cast=bool)
|
CORS_ALLOW_ALL_ORIGINS = config('CORS_ALLOW_ALL_ORIGINS', default=True, cast=bool)
|
||||||
CORS_URLS_REGEX = config('CORS_URLS_REGEX', default=r'^/api/artifacts/.*$')
|
CORS_URLS_REGEX = config('CORS_URLS_REGEX', default=r'^(?:/api/artifacts/.*|/media/artifacts/.*)$')
|
||||||
CORS_ALLOW_METHODS = config('CORS_ALLOW_METHODS', default='GET, OPTIONS', cast=Csv())
|
CORS_ALLOW_METHODS = config('CORS_ALLOW_METHODS', default='GET, OPTIONS', cast=Csv())
|
||||||
CSP_DEFAULT_SRC = config(
|
CSP_DEFAULT_SRC = config(
|
||||||
'CSP_DEFAULT_SRC',
|
'CSP_DEFAULT_SRC',
|
||||||
|
|
Loading…
Reference in New Issue