From 04024c8681cf9ecf3a92a9489008f45e445b513a Mon Sep 17 00:00:00 2001 From: Alex Brasetvik Date: Fri, 6 Dec 2013 12:37:48 +0100 Subject: [PATCH] Document http.cors-settings --- docs/reference/modules/http.asciidoc | 19 +++++++++++++++++++ 1 file changed, 19 insertions(+) diff --git a/docs/reference/modules/http.asciidoc b/docs/reference/modules/http.asciidoc index fbc153be60e0d..d8d4f6df19f10 100644 --- a/docs/reference/modules/http.asciidoc +++ b/docs/reference/modules/http.asciidoc @@ -36,6 +36,25 @@ Accept-Encoding). Defaults to `false`. |`http.compression_level` |Defines the compression level to use. Defaults to `6`. + +|`http.cors.enabled` |Enable or disable cross-origin resource sharing, +i.e. whether a browser on another origin can do requests to +Elasticsearch. Defaults to `true`. + +|`http.cors.allow-origin` |Which origins to allow. Defaults to `*`, +i.e. any origin. + +|`http.cors.max-age` |Browsers send a "preflight" OPTIONS-request to +determine CORS settings. `max-age` defines how long the result should +be cached for. Defaults to `1728000` (20 days) + +|`http.cors.allow-methods` |Which methods to allow. Defaults to +`OPTIONS, HEAD, GET, POST, PUT, DELETE`. + +|`http.cors.allow-headers` |Which headers to allow. Defaults to +`X-Requested-With, Content-Type, Content-Length`. + + |======================================================================= It also shares the uses the common