Expose CORS_ORIGIN_ALLOW_ALL setting

2015-02-24 11:19:48 -05:00
parent 94daf078ea
commit e9bb688911
2 changed files with 2 additions and 0 deletions
--- a/lms/envs/aws.py
+++ b/lms/envs/aws.py
@@ -313,6 +313,7 @@ if FEATURES.get('ENABLE_CORS_HEADERS'):
    ) + MIDDLEWARE_CLASSES
    CORS_ALLOW_CREDENTIALS = True
    CORS_ORIGIN_WHITELIST = ENV_TOKENS.get('CORS_ORIGIN_WHITELIST', ())
+    CORS_ORIGIN_ALLOW_ALL = ENV_TOKENS.get('CORS_ORIGIN_ALLOW_ALL', False)

 ############################## SECURE AUTH ITEMS ###############
 # Secret things: passwords, access keys, etc.
--- a/lms/envs/common.py
+++ b/lms/envs/common.py
@@ -1700,6 +1700,7 @@ if FEATURES.get('ENABLE_CORS_HEADERS'):
    ) + MIDDLEWARE_CLASSES
    CORS_ALLOW_CREDENTIALS = True
    CORS_ORIGIN_WHITELIST = ()
+    CORS_ORIGIN_ALLOW_ALL = False

 ###################### Registration ##################################