Remove redundant Access-Control-Allow-Origin in cors.conf ref

subzerocloud/postgrest-starter-kit#53.
developmentseed · Oct 1, 2019 · 780355f · 780355f
1 parent 6374ba9
commit 780355f
Showing 1 changed file with 1 addition and 2 deletions.
diff --git a/openresty/nginx/conf/includes/http/server/locations/rest/cors.conf b/openresty/nginx/conf/includes/http/server/locations/rest/cors.conf
@@ -11,9 +11,8 @@ if ($request_method = 'OPTIONS') {
 
 if ($request_method = 'POST') {
     set_by_lua_block $dummy {
-        ngx.header['Access-Control-Allow-Origin'] = '*';
         ngx.header['Access-Control-Allow-Methods'] = 'GET, POST, PATCH, DELETE, OPTIONS';
         ngx.header['Access-Control-Allow-Credentials'] = 'true';
         return true
     }
-}
+}