CORS: Whitelist pagination headers

f9788bc1 · Robert Schilling · d4154195 · f9788bc1 · f9788bc1
Commit f9788bc1 authored Mar 02, 2017 by Robert Schilling
Show whitespace changes
Inline Side-by-side

Showing with 6 additions and 2 deletions

changelogs/unreleased/expose-pagination-headers.yml changelogs/unreleased/expose-pagination-headers.yml +4 -0

config/application.rb config/application.rb +2 -2

No files found.
--- a/changelogs/unreleased/expose-pagination-headers.yml
+++ b/changelogs/unreleased/expose-pagination-headers.yml
+---
+title: 'CORS: Whitelist pagination headers'
+merge_request: 9651
+author: Robert Schilling
--- a/config/application.rb
+++ b/config/application.rb
@@ -120,7 +120,7 @@ module Gitlab
          credentials: true,
          headers: :any,
          methods: :any,
-          expose: ['Link']
+          expose: ['Link', 'X-Total', 'X-Total-Pages', 'X-Per-Page', 'X-Page', 'X-Next-Page', 'X-Prev-Page']
      end

      # Cross-origin requests must not have the session cookie available
@@ -130,7 +130,7 @@ module Gitlab
          credentials: false,
          headers: :any,
          methods: :any,
-          expose: ['Link']
+          expose: ['Link', 'X-Total', 'X-Total-Pages', 'X-Per-Page', 'X-Page', 'X-Next-Page', 'X-Prev-Page']
      end
    end