Ente c9fd6359aa Send HTTP credentials when fetching blobs ... With this change media-tag now sends HTTP credentials when fetching blobs. Also changed the example nginx config to send Access-Control-Allow-Credentials CORS headers. For this to work, we can no longer use '*' for Access-Control-Allow-Origin [1][2]: Therefore the example config was changed to set Access-Control-Allow-Origin to the sandbox domain only. Fixes: - #705: Blob fetch fails with 401 Unauthorized when HTTP basic auth is enabled [3] Referenes: [1]: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Access-Control-Allow-Origin [2]: https://developer.mozilla.org/en-US/docs/Web/HTTP/CORS/Errors/CORSNotSupportingCredentials [3]: https://github.com/xwiki-labs/cryptpad/issues/705		2022-12-14 11:27:51 +01:00
..
ARCHITECTURE.md	correct inconsistent capitalization of 'CryptPad' in markdown files.	2021-08-13 15:44:11 +05:30
cryptpad.service	Set reasonable value for $PWD	2020-11-05 19:23:08 +01:00
debugging.md	lint compliance	2020-12-29 17:08:48 +05:30
example.nginx.conf	Send HTTP credentials when fetching blobs	2022-12-14 11:27:51 +01:00