From 6c4294b64dce6234b7589bc2f2e660e79c425914 Mon Sep 17 00:00:00 2001 From: Allen Short Date: Wed, 2 Nov 2016 16:31:58 -0500 Subject: [PATCH] Allow '*' in REDASH_CORS_ACCESS_CONTROL_ALLOW_ORIGIN --- redash/handlers/query_results.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/redash/handlers/query_results.py b/redash/handlers/query_results.py index 15c1b8223c..6f9c2a6595 100644 --- a/redash/handlers/query_results.py +++ b/redash/handlers/query_results.py @@ -84,7 +84,7 @@ def add_cors_headers(headers): if 'Origin' in request.headers: origin = request.headers['Origin'] - if origin in settings.ACCESS_CONTROL_ALLOW_ORIGIN: + if set(['*', origin]) & settings.ACCESS_CONTROL_ALLOW_ORIGIN: headers['Access-Control-Allow-Origin'] = origin headers['Access-Control-Allow-Credentials'] = str(settings.ACCESS_CONTROL_ALLOW_CREDENTIALS).lower()