Dinawo 04a21927b2 Fix CORS blocking errors for CDN resources (v1.2.1-beta) ...

Fixed ERR_BLOCKED_BY_RESPONSE.NotSameOrigin errors by implementing proper CORS headers for public resources:
- Added Access-Control-Allow-Origin: * for public assets
- Changed Cross-Origin-Resource-Policy to cross-origin for CDN files
- Maintained strict security for sensitive routes
- Added cache control for optimal CDN performance

Affected files:
- /public/* (images, CSS, JS, fonts)
- /cdn-files/* (uploaded files)
- /attachments (file serving)

2025-10-26 00:54:39 +02:00

1.9 KiB

Raw Blame History

View Raw