From 2d2747f4b9a45847d98ba4e483bed6685a6f7b48 Mon Sep 17 00:00:00 2001 From: shindw Date: Thu, 26 Feb 2026 15:26:36 +0900 Subject: [PATCH] =?UTF-8?q?[api]=20=EC=98=A4=EB=A5=98=EC=88=98=EC=A0=95?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- .../java/com/alist/api/config/filter/DynamicCorsFilter.java | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/main/java/com/alist/api/config/filter/DynamicCorsFilter.java b/src/main/java/com/alist/api/config/filter/DynamicCorsFilter.java index 556afd8..302c64e 100644 --- a/src/main/java/com/alist/api/config/filter/DynamicCorsFilter.java +++ b/src/main/java/com/alist/api/config/filter/DynamicCorsFilter.java @@ -69,7 +69,7 @@ public class DynamicCorsFilter extends OncePerRequestFilter { response.setHeader("Access-Control-Allow-Origin", origin); response.setHeader("Access-Control-Allow-Credentials", "true"); response.setHeader("Access-Control-Allow-Methods", "GET, POST, PUT, DELETE, PATCH, OPTIONS"); - response.setHeader("Access-Control-Allow-Headers", "Content-Type, Authorization, X-Requested-With"); + response.setHeader("Access-Control-Allow-Headers", "Content-Type, Authorization, X-Requested-With, Accept, Origin, Referer, Content-Disposition, Content-Length"); response.setHeader("Access-Control-Expose-Headers", "Authorization, Set-Cookie"); response.setHeader("Access-Control-Max-Age", "3600"); }