fix: remove CORS origins header from nginx (set by Rails?)

hotosm · Jul 16, 2024 · 431df46 · 431df46
1 parent 108b88b
commit 431df46
Show file tree

Hide file tree

Showing 2 changed files with 0 additions and 4 deletions.
diff --git a/nginx/templates/osm-dev.conf.template b/nginx/templates/osm-dev.conf.template
@@ -10,9 +10,6 @@ server {
 
     client_max_body_size 10M;
 
-    # Response headers
-    add_header Access-Control-Allow-Origin *;
-
     location / {
         # Requests headers
         proxy_set_header Host                $http_host;

diff --git a/nginx/templates/osm.conf.template b/nginx/templates/osm.conf.template
@@ -23,7 +23,6 @@ server {
     client_max_body_size 10M;
 
     add_header 'Content-Security-Policy' 'upgrade-insecure-requests';
-    add_header Access-Control-Allow-Origin *;
 
     location / {
         # Requests headers