| | |
| | | allowedList = Arrays.asList(allowedCORSDomain); |
| | | if (allowedList.contains(origin)) { |
| | | resp.setHeader("Access-Control-Allow-Origin", origin); |
| | | resp.setHeader("Access-Control-Allow-Headers", "X-Requested-With,content-type,token,content-disposition"); |
| | | resp.setHeader("Access-Control-Allow-Headers", "X-Requested-With,content-type,token"); |
| | | //resp.setHeader("Access-Control-Allow-Methods", "GET, HEAD, POST, PUT, DELETE, TRACE, OPTIONS, PATCH"); |
| | | //resp.setHeader("Access-Control-Allow-Methods", "GET, HEAD, POST, PUT, DELETE, TRACE, PATCH"); |
| | | resp.setHeader("Access-Control-Allow-Methods", "GET, POST"); |