Match Synapse's CORS headers

Related to matrix-org/synapse#10114
devture · Jul 10, 2021 · 1b99787 · 1b99787
1 parent daf2d56
commit 1b99787
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/corporal/httpgateway/handler/catchall.go b/corporal/httpgateway/handler/catchall.go
@@ -50,8 +50,8 @@ func (me *catchAllHandler) actionCatchAll(w http.ResponseWriter, r *http.Request
 		logger.Debugf("HTTP gateway: replying to OPTIONS")
 
 		w.Header().Set("Access-Control-Allow-Origin", "*")
-		w.Header().Set("Access-Control-Allow-Methods", "GET, POST, PUT, DELETE, OPTIONS")
-		w.Header().Set("Access-Control-Allow-Headers", "Origin, X-Requested-With, Content-Type, Accept, Authorization")
+		w.Header().Set("Access-Control-Allow-Methods", "GET, HEAD, POST, PUT, DELETE, OPTIONS")
+		w.Header().Set("Access-Control-Allow-Headers", "X-Requested-With, Content-Type, Authorization, Date")
 		w.WriteHeader(http.StatusOK)
 		return
 	}