Remove nonexistent PHP 8.5 constraint, restrict CORS allowed_headers

2026-05-26 17:08:31 +02:00
parent 769abddeca
commit e754858c84
2 changed files with 2 additions and 2 deletions
@@ -25,7 +25,7 @@ return [

    'allowed_origins_patterns' => [],

-    'allowed_headers' => ['*'],
+    'allowed_headers' => ['Content-Type', 'X-Requested-With', 'Authorization', 'X-XSRF-TOKEN'],

    'exposed_headers' => [],