diff options
| author | Rado Kirov | 2012-09-28 15:43:01 -0700 |
|---|---|---|
| committer | Igor Minar | 2012-11-26 23:58:59 +0100 |
| commit | fce100a46c5681562253c3a856d67bbd35fbc2f2 (patch) | |
| tree | 1e85ce51888372d6184d401ef9033791d6a80c20 /test/auto | |
| parent | 3a75b1124d062f64093a90b26630938558909e8d (diff) | |
| download | angular.js-fce100a46c5681562253c3a856d67bbd35fbc2f2.tar.bz2 | |
fix($http): only set X-XSFR-TOKEN header for same-domain request
This is needed to prevent CORS preflight checks. The XSFR token
is quite useless for CORS requests anyway.
BREAKING CHANGE: X-XSFR-TOKEN is no longer send for cross domain
requests. This shouldn't affect any known production service.
Closes #1096
Diffstat (limited to 'test/auto')
0 files changed, 0 insertions, 0 deletions