Merge pull request api-platform#1434 from dunglas/cors-vulcain

dunglas · web-flow · commit ca2835cdb319 · 2020-02-27T09:09:15.000+01:00
CORS: whitelist Vulcain headers
diff --git a/api/config/packages/nelmio_cors.yaml b/api/config/packages/nelmio_cors.yaml
@@ -3,7 +3,7 @@ nelmio_cors:
         origin_regex: true
         allow_origin: ['%env(CORS_ALLOW_ORIGIN)%']
         allow_methods: ['GET', 'OPTIONS', 'POST', 'PUT', 'PATCH', 'DELETE']
-        allow_headers: ['Content-Type', 'Authorization']
+        allow_headers: ['Content-Type', 'Authorization', 'Preload', 'Fields']
         expose_headers: ['Link']
         max_age: 3600
     paths:
