Skip to content

Instantly share code, notes, and snippets.

@shrekuu

shrekuu/apache_cors_example

Forked from brianlmoon/apache_cors_example
Created April 25, 2018 07:40
Show Gist options
  • Save shrekuu/cbc210efe249fc41c4351e2bdb1a261c to your computer and use it in GitHub Desktop.
Save shrekuu/cbc210efe249fc41c4351e2bdb1a261c to your computer and use it in GitHub Desktop.
Download ZIP
CORS example for Apache with multiple domains
Raw
apache_cors_example
# Sets CORS headers for request from example1.com and example2.com pages
# for both SSL and non-SSL
SetEnvIf Origin "^https?://[^/]*(example1|example2)\.com$" ORIGIN=$0
Header set Access-Control-Allow-Origin %{ORIGIN}e env=ORIGIN
Header set Access-Control-Allow-Credentials "true" env=ORIGIN
# Always set Vary: Origin when it's possible you may send CORS headers
Header merge Vary Origin
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment