diff --git a/lib/cartodb/middleware/cors.js b/lib/cartodb/middleware/cors.js index 227bb477..ee924a90 100644 --- a/lib/cartodb/middleware/cors.js +++ b/lib/cartodb/middleware/cors.js @@ -1,11 +1,14 @@ module.exports = function cors(extraHeaders) { - return function(req, res, next) { + return function corsMiddleware (req, res, next) { var baseHeaders = "X-Requested-With, X-Prototype-Version, X-CSRF-Token"; + if(extraHeaders) { baseHeaders += ", " + extraHeaders; } + res.set("Access-Control-Allow-Origin", "*"); res.set("Access-Control-Allow-Headers", baseHeaders); + next(); }; };