can't remove origin header if we want CORS to work right

Liturgical-Calendar · Apr 29, 2024 · edbf726 · edbf726
1 parent 216d497
commit edbf726
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/includes/APICore.php b/includes/APICore.php
@@ -13,7 +13,7 @@ class APICore {
     private ?string $ResponseContentType        = null;
 
     private static array $onlyUsefulHeaders = [
-        "Accept", "Accept-Language", "X-Requested-With", "Host"
+        "Accept", "Accept-Language", "X-Requested-With", "Host", "Origin"
     ];
 
     public function __construct(){