Default set of allowed CORS headers
Source position: httpdefs.pp line 770
const DefaultAllowedHeaders = 'x-requested-with, content-type, authorization'; |
DefaultAllowedHeaders contains the default set of HTTP headers allowed in CORS requests. This constant provides a standard list of commonly permitted headers for cross-origin requests.