Put CORS header back to http://* with comment on why browsers are annoying

This commit is contained in:
David Baker 2023-03-24 09:31:52 +00:00
parent d1ba5dff38
commit 40f5c53c05

View file

@ -5,7 +5,9 @@ receivers:
endpoint: 0.0.0.0:4318
cors:
allowed_origins:
- "*"
# This can't be '*' because opentelemetry-js uses sendBeacon which always operates
# in 'withCredentials' mode, which browsers don't allow with an allow-origin of '*'
- "http://*"
allowed_headers:
- "*"
processors: