Use cancancan to authorize user_preference_controller

[rails.git] / public / api / crossdomain.xml

diff --git a/public/api/crossdomain.xml b/public/api/crossdomain.xml
index 5af4469de66d6e0f041ea69e620dbfabb155a218..a8029a905d5dc8ddb3797508f55ecf65257d788c 100644 (file)
--- a/public/api/crossdomain.xml
+++ b/public/api/crossdomain.xml
@@ -3,5 +3,5 @@
 
 <cross-domain-policy>
        <allow-access-from domain="*" secure="false"/>
 
 <cross-domain-policy>
        <allow-access-from domain="*" secure="false"/>

-       <allow-http-request-headers-from domain="*" headers="*"/>
+       <allow-http-request-headers-from domain="*" headers="*" secure="false"/>

 </cross-domain-policy>
 </cross-domain-policy>