#25 - x-site scripting headers

matijaabicic · Oct 12, 2015 · 946bb88 · 946bb88
1 parent 8d875a8
commit 946bb88
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 4 deletions.
diff --git a/server.js b/server.js
@@ -27,8 +27,8 @@ app.use(allowCrossDomain);
 
 //function to help with cross-site scripting
 function allowCrossDomain(req, res, next) {
-  res.Header('Access-Control-Allow-Methods', '*');
-  res.header("Access-Control-Allow-Headers", "X-Requested-With");
+  res.setHeader('Access-Control-Allow-Methods', '*');
+  res.setHeader("Access-Control-Allow-Headers", "X-Requested-With");
   if (req.method === 'OPTIONS') {
     res.send(200);
   } else {

diff --git a/settings.js b/settings.js
@@ -1,10 +1,10 @@
 //app-specific sentence
 
 module.exports = {
-  debug : false,
+  debug : true,
   slackChannel : "#football",
   serverPort : 8080,
-  pingInteralInMilliseconds : 1000 * 60, // server main loop interval.
+  pingInteralInMilliseconds : 1000, // server main loop interval.
   postBeforeTheMatch : true,
   postAfterTheMatch : true,
   preMatchWindowInMinutes: 5, // time before the match in minutes when we are ready to rant