only add Access-Control-Allow-Headers if needed

diff --git a/lib/init-website.php b/lib/init-website.php
index 94dba6f4a15599675da89c7e484a334692035b39..bcf3ebf7a0aeb6674e874ebbf3ed7413572373dc 100644 (file)
--- a/lib/init-website.php
+++ b/lib/init-website.php
@@ -5,7 +5,10 @@
        {
                header("Access-Control-Allow-Origin: *");
                header("Access-Control-Allow-Methods: OPTIONS,GET");
-               header("Access-Control-Allow-Headers: ".$_SERVER['HTTP_ACCESS_CONTROL_REQUEST_HEADERS']);
+               if (!empty($_SERVER['HTTP_ACCESS_CONTROL_REQUEST_HEADERS']))
+               {
+                       header("Access-Control-Allow-Headers: ".$_SERVER['HTTP_ACCESS_CONTROL_REQUEST_HEADERS']);
+               }
        }
        if ($_SERVER['REQUEST_METHOD'] == 'OPTIONS') exit;