add allowed headers CORS

1 year ago · 59fb7d7e6b
parent 1f31ec3620
commit 59fb7d7e6b
1 changed files with 1 additions and 1 deletions
--- a/app/routes.php
+++ b/app/routes.php
@ -6,7 +6,7 @@ require_once "database_con.php";
 require_once "token.php";

 header("Access-Control-Allow-Origin: *");
-header("Access-Control-Allow-Headers: *");
+header("Access-Control-Allow-Headers: X-Requested-With, Content-Type, Accept, Origin, Authorization");
 header("Access-Control-Allow-Methods: GET, POST, PUT, DELETE");
 header("Access-Control-Allow-Credentials: true");