fix: allow X-Cacheable access control header by default

johannschopplich · Nov 21, 2024 · 60a338d · 60a338d
1 parent 0f4d750
commit 60a338d
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/classes/Api/Api.php b/src/classes/Api/Api.php
@@ -98,7 +98,7 @@ public static function createPreflightResponse(): Response
         return new Response('', null, 204, [
             'Access-Control-Allow-Origin' => $kirby->option('headless.cors.allowOrigin', '*'),
             'Access-Control-Allow-Methods' => $kirby->option('headless.cors.allowMethods', 'GET, POST, OPTIONS'),
-            'Access-Control-Allow-Headers' => $kirby->option('headless.cors.allowHeaders', 'Accept, Content-Type, Authorization, X-Language'),
+            'Access-Control-Allow-Headers' => $kirby->option('headless.cors.allowHeaders', 'Authorization, X-Language, X-Cacheable'),
             'Access-Control-Max-Age' => $kirby->option('headless.cors.maxAge', '86400'),
         ]);
     }