Platform Explorer / Nuxeo Platform 2023.23

Component org.nuxeo.ecm.platform.ui.web.cors

In bundle org.nuxeo.ecm.platform.web.common

Resolution Order

623
The resolution order represents the order in which this component has been resolved by the Nuxeo Runtime framework.
You can influence this order by adding "require" tags in your component declaration, to make sure it is resolved after another component.

Contributions

XML Source

<?xml version="1.0"?>
<component name="org.nuxeo.ecm.platform.ui.web.cors">

  <extension target="org.nuxeo.runtime.ConfigurationService" point="configuration">
    <documentation>
      Property that allows to disable strict CORS checks when a request has Origin: null.
      This may happen for local files, or for a JavaScript-triggered redirect.
      Setting this to true may expose the application to CSRF problems from files
      locally hosted on the user's disk.

      @since 10.3
    </documentation>
    <property name="nuxeo.cors.allowNullOrigin">false</property>
  </extension>

</component>