15 lines
412 B
JavaScript
15 lines
412 B
JavaScript
module.exports = function cors (extraHeaders) {
|
|
return function corsMiddleware (req, res, next) {
|
|
let baseHeaders = "X-Requested-With, X-Prototype-Version, X-CSRF-Token";
|
|
|
|
if(extraHeaders) {
|
|
baseHeaders += ", " + extraHeaders;
|
|
}
|
|
|
|
res.set("Access-Control-Allow-Origin", "*");
|
|
res.set("Access-Control-Allow-Headers", baseHeaders);
|
|
|
|
next();
|
|
};
|
|
};
|