[ https://issues.apache.org/jira/browse/JCR-3727?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13902983#comment-13902983 ]
Tobias Bocanegra commented on JCR-3727: --------------------------------------- Thanks for the patch - however, this basically disables any CORS security and allows CORS from any client. we should at least make the allowed origins configurable. also a bit more explanation in what scenarios you need this would be good. usually you can solve CORS problems with jsonp. > enable CORS preflight requests on AbstractWebdavServlet > ------------------------------------------------------- > > Key: JCR-3727 > URL: https://issues.apache.org/jira/browse/JCR-3727 > Project: Jackrabbit Content Repository > Issue Type: Improvement > Components: jackrabbit-webdav > Affects Versions: 2.4.5, 2.6.5, 2.7.5 > Reporter: Oliver Lietz > Labels: CORS > Attachments: JCR-3727-2.4.diff > > > see http://www.w3.org/TR/cors/ -- This message was sent by Atlassian JIRA (v6.1.5#6160)