fix(CORS): add X-Requested-With to Access-Control-Request-Headers (#5009)

allows clients with `X-Requested-With` header to succeed with their CORS request
2025-08-11 21:07:31 +00:00 · 2023-01-09 13:37:10 +01:00
parent 5651f98600
commit 0a30e39b46
4 changed files with 33 additions and 22 deletions
--- a/internal/api/http/header.go
+++ b/internal/api/http/header.go
@@ -22,6 +22,7 @@ const (
 	ForwardedFor    = "x-forwarded-for"
 	XUserAgent      = "x-user-agent"
 	XGrpcWeb        = "x-grpc-web"
+	XRequestedWith  = "x-requested-with"
 	IfNoneMatch     = "If-None-Match"
 	LastModified    = "Last-Modified"
 	Etag            = "Etag"