CORS: Whitelist pagination headers

f9788bc1 · Robert Schilling · d4154195 · f9788bc1 · f9788bc1
隐藏空白更改
内联并排

Showing with 6 addition and 2 deletion

changelogs/unreleased/expose-pagination-headers.yml changelogs/unreleased/expose-pagination-headers.yml +4 -0

config/application.rb config/application.rb +2 -2

未找到文件。
--- a/changelogs/unreleased/expose-pagination-headers.yml
+++ b/changelogs/unreleased/expose-pagination-headers.yml
+---
+title: 'CORS: Whitelist pagination headers'
+merge_request: 9651
+author: Robert Schilling
--- a/config/application.rb
+++ b/config/application.rb
@@ -120,7 +120,7 @@ module Gitlab
          credentials: true,
          headers: :any,
          methods: :any,
-          expose: ['Link']
+          expose: ['Link', 'X-Total', 'X-Total-Pages', 'X-Per-Page', 'X-Page', 'X-Next-Page', 'X-Prev-Page']
      end

      # Cross-origin requests must not have the session cookie available
@@ -130,7 +130,7 @@ module Gitlab
          credentials: false,
          headers: :any,
          methods: :any,
-          expose: ['Link']
+          expose: ['Link', 'X-Total', 'X-Total-Pages', 'X-Per-Page', 'X-Page', 'X-Next-Page', 'X-Prev-Page']
      end
    end