[taler-docs] branch master updated: specify disable CORS

[gnunet]

This is an automated email from the git hooks/post-receive script.

grothoff pushed a commit to branch master
in repository docs.

The following commit(s) were added to refs/heads/master by this push:
     new 67f1866  specify disable CORS
67f1866 is described below

commit 67f186613b9fa96c54110ea4112f5ddf5f080161
Author: Christian Grothoff <address@hidden>
AuthorDate: Sat Nov 23 08:28:25 2019 +0100

    specify disable CORS
---
 core/api-sync.rst | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/core/api-sync.rst b/core/api-sync.rst
index 8b8ce5e..50cde65 100644
--- a/core/api-sync.rst
+++ b/core/api-sync.rst
@@ -405,3 +405,12 @@ $SYNC-PATH the (usually empty) path.  By putting the 
private key after
 "#", we may succeed in disclosing the value even to eager Web-ish
 interpreters of URLs.  Note that the actual synchronization service
 must use the HTTPS protocol, which means we can leave out this prefix.
+
+
+---------------------------
+Web Security Considerations
+---------------------------
+
+To ensure that the Taler Web extension (and others) can access the
+service despite Web "security", all service endpoints must set the
+"Access-Control-Allow-Origin: *".

-- 
To stop receiving notification emails like this one, please contact
address@hidden.