Merge pull request #71 from ndlib/MEL-378-CORS-CSRF

adding additional CORS header for Curate integration
ndlib · May 6, 2019 · 4d61ca9 · 4d61ca9
2 parents e42ed67 + ce4ed96
commit 4d61ca9
Showing 1 changed file with 8 additions and 0 deletions.
diff --git a/deploy/cloudformation/manifest-pipeline.yml b/deploy/cloudformation/manifest-pipeline.yml
@@ -156,6 +156,14 @@ Resources:
             AllowedOrigins:
               - '*'
             MaxAge: 3000
+          - Id: CSRFCorsHeader
+            AllowedHeaders:
+              - X-CSRF-Token
+            AllowedMethods:
+              - GET
+              - HEAD
+            AllowedOrigins:
+              - '*'
   ManifestBucketPolicy:
     Type: AWS::S3::BucketPolicy
     DependsOn: OriginAccessIdentity