From 5e50d0480a3c2e8c4b8c879cedacf18866a20e19 Mon Sep 17 00:00:00 2001 From: "J.M" Date: Thu, 26 Dec 2013 16:21:06 +0100 Subject: [PATCH 1/2] Add Access-Control-Expose-Headers header --- codebird-cors-proxy.php | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/codebird-cors-proxy.php b/codebird-cors-proxy.php index 94e4374..cd75569 100644 --- a/codebird-cors-proxy.php +++ b/codebird-cors-proxy.php @@ -88,7 +88,9 @@ function http_get_request_body() $cors_headers = array( 'Access-Control-Allow-Origin: *', 'Access-Control-Allow-Headers: Origin, X-Authorization', - 'Access-Control-Allow-Methods: POST, GET, OPTIONS' + 'Access-Control-Allow-Methods: POST, GET, OPTIONS', + 'Access-Control-Expose-Headers: ' + . 'X-Rate-Limit-Limit, X-Rate-Limit-Remaining, X-Rate-Limit-Reset' ); foreach($cors_headers as $cors_header) { From 51de31f5e95547744e523b9c77addbdc1e7e3055 Mon Sep 17 00:00:00 2001 From: "J.M" Date: Thu, 26 Dec 2013 16:21:15 +0100 Subject: [PATCH 2/2] Add CHANGELOG entry for #3 --- CHANGELOG | 3 +++ 1 file changed, 3 insertions(+) diff --git a/CHANGELOG b/CHANGELOG index 5ef8f42..991b7bb 100644 --- a/CHANGELOG +++ b/CHANGELOG @@ -1,6 +1,9 @@ codebird-cors-proxy - changelog =============================== +1.2.3 (2013-12-26) ++ #3 Whitelist rate-limiting headers in CORS + 1.2.2 (2013-08-20) - Fix oauth method detection code