From bb95da21cf7903c466b2b3b30ac7705653eb52b0 Mon Sep 17 00:00:00 2001 From: shindw Date: Thu, 26 Feb 2026 15:25:24 +0900 Subject: [PATCH] =?UTF-8?q?[api]=20=EC=98=A4=EB=A5=98=EC=88=98=EC=A0=95?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- .../java/com/alist/api/config/filter/DynamicCorsFilter.java | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/main/java/com/alist/api/config/filter/DynamicCorsFilter.java b/src/main/java/com/alist/api/config/filter/DynamicCorsFilter.java index 065025f..556afd8 100644 --- a/src/main/java/com/alist/api/config/filter/DynamicCorsFilter.java +++ b/src/main/java/com/alist/api/config/filter/DynamicCorsFilter.java @@ -69,7 +69,7 @@ public class DynamicCorsFilter extends OncePerRequestFilter { response.setHeader("Access-Control-Allow-Origin", origin); response.setHeader("Access-Control-Allow-Credentials", "true"); response.setHeader("Access-Control-Allow-Methods", "GET, POST, PUT, DELETE, PATCH, OPTIONS"); - response.setHeader("Access-Control-Allow-Headers", "*"); + response.setHeader("Access-Control-Allow-Headers", "Content-Type, Authorization, X-Requested-With"); response.setHeader("Access-Control-Expose-Headers", "Authorization, Set-Cookie"); response.setHeader("Access-Control-Max-Age", "3600"); }