Contribution org.nuxeo.ecm.platform.ui.web.cors--configuration
In component org.nuxeo.ecm.platform.ui.web.cors
This contribution is part of XML component org.nuxeo.ecm.platform.ui.web.cors
inside nuxeo-platform-web-common-2023.6.12.jar /OSGI-INF/cors-configuration.xml
You can influence this order by adding "require" tags in the containing component declaration, to make sure it is resolved after another component (see "Resolution Order" on components).
Documentation
Property that allows to disable strict CORS checks when a request has Origin: null. This may happen for local files, or for a JavaScript-triggered redirect. Setting this to true may expose the application to CSRF problems from files locally hosted on the user's disk.
@since 10.3
Extension Point
Extension point configuration of component ConfigurationService.Registration Order
48
The registration order represents the order in which this contribution was registered on its target extention
point.
This will impact the override/merge behaviour when it is implemented on the target service, and is useful for
proper customization of existing contributions.
You can influence this order by adding "require" tags in the containing component declaration, to make sure it is resolved after another component (see "Resolution Order" on components).
Contributed Items
XML Source
<extension point="configuration" target="org.nuxeo.runtime.ConfigurationService">
<documentation>
Property that allows to disable strict CORS checks when a request has Origin: null.
This may happen for local files, or for a JavaScript-triggered redirect.
Setting this to true may expose the application to CSRF problems from files
locally hosted on the user's disk.
@since 10.3
</documentation>
<property name="nuxeo.cors.allowNullOrigin">false</property>
</extension>