From 08b4d3966f2f7172de86270ed61f4b70ed786e90 Mon Sep 17 00:00:00 2001
From: pigpig <pigpig@pig.pig>
Date: Fri, 11 Dec 2020 22:39:31 +0100
Subject: [PATCH] Remove CORS * header

---
 conf/config.yml | 4 ----
 1 file changed, 4 deletions(-)

diff --git a/conf/config.yml b/conf/config.yml
index 70520cd..2ea5599 100644
--- a/conf/config.yml
+++ b/conf/config.yml
@@ -6,10 +6,6 @@ server:
     enabled: false # if https should be enabled
     redirecttohttps: false # redirect to https if site is accessed by http
 
-  responseheaders: # response headers are added to every response (default: none)
-    Access-Control-Allow-Origin: "*"
-    Access-Control-Allow-Methods: "GET,POST"
-
   stream:
     allowedorigins: # allowed origins for websocket connections (same origin is always allowed)
       - ".+.__DOMAIN__"