CORS nastavitve v repozitorij

.gitignore

@@ -7,8 +7,10 @@
 
 # Ignore configuration files that may contain sensitive information
 /web/sites/*/*settings*.php
-/web/sites/default/settings.php
-/web/sites/*/*services*.yml
+!/web/sites/default/settings.php
+/web/sites/*/default.services.yml
+/web/sites/*/services.yml
+!/web/sites/*/development.services.yml
 
 # Ignore paths that may contain user-generated content
 /web/sites/*/files

web/sites/default/development.services.yml

@@ -0,0 +1,17 @@
+parameters:
+  cors.config:
+    enabled: true
+    # Specify allowed headers, like 'x-allowed-header'.
+    allowedHeaders: ['x-csrf-token','authorization','content-type','accept','origin','x-requested-with']
+    # Specify allowed request methods, specify ['*'] to allow all possible ones.
+    allowedMethods: ['*']
+    # Configure requests allowed from specific origins.
+    allowedOrigins: ['*']
+    # Sets the Access-Control-Expose-Headers header.
+    exposedHeaders: false
+    # Sets the Access-Control-Max-Age header.
+    maxAge: false
+    # Sets the Access-Control-Allow-Credentials header.
+    supportsCredentials: false
+  twig.config:
+    debug: true