Merge pull request #3225 from sideshowbarker/client-server-api-Access…

…-Control-Allow-Headers-drop-Options-Accept Drop Origin & Accept from Access-Control-Allow-Headers value
matrix-org · Aug 27, 2021 · f433e07 · f433e07
2 parents efbccb6 + d7cf63d
commit f433e07
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/content/client-server-api/_index.md b/content/client-server-api/_index.md
@@ -226,7 +226,7 @@ headers to be returned by servers on all requests are:
 
     Access-Control-Allow-Origin: *
     Access-Control-Allow-Methods: GET, POST, PUT, DELETE, OPTIONS
-    Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization
+    Access-Control-Allow-Headers: X-Requested-With, Content-Type, Authorization
 
 ## Server Discovery