Change access control to implement more of CORS. Change so OPTIONS requests don...

[nominatim.git] / lib / init-website.php

diff --git a/lib/init-website.php b/lib/init-website.php
index 8603e309f426f888bb8bd1834ee8a6b86be75736..94dba6f4a15599675da89c7e484a334692035b39 100644 (file)
--- a/lib/init-website.php
+++ b/lib/init-website.php
@@ -1,6 +1,14 @@
 <?php
        require_once('init.php');
 
+       if (CONST_NoAccessControl)
+       {
+               header("Access-Control-Allow-Origin: *");
+               header("Access-Control-Allow-Methods: OPTIONS,GET");
+               header("Access-Control-Allow-Headers: ".$_SERVER['HTTP_ACCESS_CONTROL_REQUEST_HEADERS']);
+       }
+       if ($_SERVER['REQUEST_METHOD'] == 'OPTIONS') exit;
+
        if (CONST_ClosedForIndexing && strpos(CONST_ClosedForIndexingExceptionIPs, ','.$_SERVER["REMOTE_ADDR"].',') === false)
        {
                echo "Closed for re-indexing...";