You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: docs/setup/settings.asciidoc
+1-1Lines changed: 1 addition & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -452,7 +452,7 @@ deprecation warning at startup. This setting cannot end in a slash (`/`).
452
452
| experimental[] Set to `true` to allow browser code to access response body whenever request performed with user credentials. *Default:* `false`
453
453
454
454
| `server.cors.origin:`
455
-
| experimental[] List of origins permitted to access resources. You must specify `server.cors.origin` when `server.cors.credentials: true`. *Default:* "*"
455
+
| experimental[] List of origins permitted to access resources. You must specify explicit hostnames and not use `*` for `server.cors.origin` when `server.cors.credentials: true`. *Default:* "*"
456
456
457
457
| `server.compression.referrerWhitelist:`
458
458
| Specifies an array of trusted hostnames, such as the {kib} host, or a reverse
0 commit comments