From: Matt Amos <zerebubuth@gmail.com>
Date: Wed, 26 Aug 2009 14:49:49 +0000 (+0000)
Subject: Allowing flash to do what all other HTTP clients can (well, apart from the bits which... 
X-Git-Tag: live~6615^2
X-Git-Url: https://git.openstreetmap.org/rails.git/commitdiff_plain/26a9f98dc1746e5964276034de893c0a86a13758

Allowing flash to do what all other HTTP clients can (well, apart from the bits which are broken by design).
---

diff --git a/public/api/crossdomain.xml b/public/api/crossdomain.xml
index cbc8e2546..669cae37d 100644
--- a/public/api/crossdomain.xml
+++ b/public/api/crossdomain.xml
@@ -3,8 +3,5 @@
 
 <cross-domain-policy>
 	<allow-access-from domain="*"/>
-	<allow-http-request-headers-from domain="*" headers="Authorization"/>
-	<allow-http-request-headers-from domain="*.openstreetmap.org" headers="*"/>
-	<allow-http-request-headers-from domain="*.openstreetmap.net" headers="*"/>
-	<allow-http-request-headers-from domain="*.openstreetmap.com" headers="*"/>
+	<allow-http-request-headers-from domain="*" headers="*"/>
 </cross-domain-policy>
diff --git a/public/oauth/crossdomain.xml b/public/oauth/crossdomain.xml
index cbc8e2546..669cae37d 100644
--- a/public/oauth/crossdomain.xml
+++ b/public/oauth/crossdomain.xml
@@ -3,8 +3,5 @@
 
 <cross-domain-policy>
 	<allow-access-from domain="*"/>
-	<allow-http-request-headers-from domain="*" headers="Authorization"/>
-	<allow-http-request-headers-from domain="*.openstreetmap.org" headers="*"/>
-	<allow-http-request-headers-from domain="*.openstreetmap.net" headers="*"/>
-	<allow-http-request-headers-from domain="*.openstreetmap.com" headers="*"/>
+	<allow-http-request-headers-from domain="*" headers="*"/>
 </cross-domain-policy>