From: Mike Taylor <mike@indexdata.com>
Date: Wed, 19 Jun 2013 17:08:13 +0000 (+0100)
Subject: More specific ACAO
X-Git-Tag: 0.9.1~575^2~7
X-Git-Url: http://sru.miketaylor.org.uk/cgi-bin?a=commitdiff_plain;h=90a17d97b0f57b102ccb56e74567cefa656be101;p=mkws-moved-to-github.git

More specific ACAO
---

diff --git a/etc/apache2/spclient-live b/etc/apache2/spclient-live
index 0d5a5c3..2d5eebf 100644
--- a/etc/apache2/spclient-live
+++ b/etc/apache2/spclient-live
@@ -16,8 +16,7 @@
     RewriteLog /var/log/apache2/mkws-rewrite.log 
     RewriteRule /service-proxy-auth /service-proxy/?command=auth&action=login&username=guest&password=guest [P] # [NE,P]
 
-    ### Way too general: should limit by requested URL and origin
-    Header set Access-Control-Allow-Origin "*"
+    Header set Access-Control-Allow-Origin "http://somesite.indexdata.com"
 
     # For MKC Service Proxy
     ProxyPass        /service-proxy/ http://mkc.indexdata.com:9009/service-proxy/