From: Andy Allan <gravitystorm@gmail.com>
Date: Tue, 29 Sep 2009 14:18:33 +0000 (+0000)
Subject: Merge r17285 from the oauth branch - allow flash access to set headers, even when... 
X-Git-Tag: live~6638
X-Git-Url: https://git.openstreetmap.org/rails.git/commitdiff_plain/5d07b6d76c9488334608d3db57c5bc79bb6d177d?hp=d9c17e930d7247375b7025dbeb7cec3fc1fb10cd

Merge r17285 from the oauth branch - allow flash access to set headers, even when hosted at non-openstreetmap domains
---

diff --git a/public/api/crossdomain.xml b/public/api/crossdomain.xml
index cbc8e2546..669cae37d 100644
--- a/public/api/crossdomain.xml
+++ b/public/api/crossdomain.xml
@@ -3,8 +3,5 @@
 
 <cross-domain-policy>
 	<allow-access-from domain="*"/>
-	<allow-http-request-headers-from domain="*" headers="Authorization"/>
-	<allow-http-request-headers-from domain="*.openstreetmap.org" headers="*"/>
-	<allow-http-request-headers-from domain="*.openstreetmap.net" headers="*"/>
-	<allow-http-request-headers-from domain="*.openstreetmap.com" headers="*"/>
+	<allow-http-request-headers-from domain="*" headers="*"/>
 </cross-domain-policy>
diff --git a/public/oauth/crossdomain.xml b/public/oauth/crossdomain.xml
index cbc8e2546..669cae37d 100644
--- a/public/oauth/crossdomain.xml
+++ b/public/oauth/crossdomain.xml
@@ -3,8 +3,5 @@
 
 <cross-domain-policy>
 	<allow-access-from domain="*"/>
-	<allow-http-request-headers-from domain="*" headers="Authorization"/>
-	<allow-http-request-headers-from domain="*.openstreetmap.org" headers="*"/>
-	<allow-http-request-headers-from domain="*.openstreetmap.net" headers="*"/>
-	<allow-http-request-headers-from domain="*.openstreetmap.com" headers="*"/>
+	<allow-http-request-headers-from domain="*" headers="*"/>
 </cross-domain-policy>