Cross Origin Resource Sharing (CORS)¶
Configure your web server to send a restrictive CORS header with each response, allowing only the dashboard domain and protocol:
Access-Control-Allow-Origin: https://example.com/
Never allow the wild card origin.
Except where otherwise noted, this document is licensed under Creative Commons Attribution 3.0 License. See all OpenStack Legal Documents.