Add a permissive CORS header on the assets directory

This commit is contained in:
Matt Isenhower 2018-03-20 12:07:58 -07:00
parent 2cb9eb62c9
commit 85d4ff6afe

View File

@ -17,6 +17,11 @@ server {
add_header Cache-Control no-cache;
}
# CORS (for third-party integrations)
location /assets/ {
add_header Access-Control-Allow-Origin *;
}
# Block access to the file used for screenshots
location = /screenshots.html {
internal;