Sync changes from upstream repository

Hubot · Hubot · commit 121fa7b92389 · 2014-12-01T09:45:53.000Z
diff --git a/content/v3.md b/content/v3.md
@@ -484,36 +484,35 @@ X-RateLimit-Reset: 1372700873
 
 ## Cross Origin Resource Sharing
 
-The API supports Cross Origin Resource Sharing (CORS) for AJAX requests.
-you can read the [CORS W3C working draft](http://www.w3.org/TR/cors), or
+The API supports Cross Origin Resource Sharing (CORS) for AJAX requests from
+any origin.
+You can read the [CORS W3C Recommendation](http://www.w3.org/TR/cors), or
 [this intro](http://code.google.com/p/html5security/wiki/CrossOriginRequestSecurity) from the
 HTML 5 Security Guide.
 
 Here's a sample request sent from a browser hitting
 `http://example.com`:
 
-    $ curl -i https://api.github.com -H "Origin: http://example.com"
-    HTTP/1.1 302 Found
-
-Any domain that is registered as an OAuth Application is accepted.
-Here's a sample request for a browser hitting [Travis CI](http://travis-ci.org/):
-
-    $ curl -i https://api.github.com -H "Origin: http://travis-ci.org"
-    HTTP/1.1 302 Found
-    Access-Control-Allow-Origin: *
-    Access-Control-Expose-Headers: ETag, Link, X-RateLimit-Limit, X-RateLimit-Remaining, X-RateLimit-Reset, X-OAuth-Scopes, X-Accepted-OAuth-Scopes
-    Access-Control-Allow-Credentials: true
+<pre class="terminal">
+$ curl -i https://api.github.com -H "Origin: http://example.com"
+HTTP/1.1 302 Found
+Access-Control-Allow-Origin: *
+Access-Control-Expose-Headers: ETag, Link, X-GitHub-OTP, X-RateLimit-Limit, X-RateLimit-Remaining, X-RateLimit-Reset, X-OAuth-Scopes, X-Accepted-OAuth-Scopes, X-Poll-Interval
+Access-Control-Allow-Credentials: true
+</pre>
 
 This is what the CORS preflight request looks like:
 
-    $ curl -i https://api.github.com -H "Origin: http://travis-ci.org" -X OPTIONS
-    HTTP/1.1 204 No Content
-    Access-Control-Allow-Origin: *
-    Access-Control-Allow-Headers: Authorization, Content-Type, If-Match, If-Modified-Since, If-None-Match, If-Unmodified-Since, X-Requested-With
-    Access-Control-Allow-Methods: GET, POST, PATCH, PUT, DELETE
-    Access-Control-Expose-Headers: ETag, Link, X-RateLimit-Limit, X-RateLimit-Remaining, X-RateLimit-Reset, X-OAuth-Scopes, X-Accepted-OAuth-Scopes
-    Access-Control-Max-Age: 86400
-    Access-Control-Allow-Credentials: true
+<pre class="terminal">
+$ curl -i https://api.github.com -H "Origin: http://example.com" -X OPTIONS
+HTTP/1.1 204 No Content
+Access-Control-Allow-Origin: *
+Access-Control-Allow-Headers: Authorization, Content-Type, If-Match, If-Modified-Since, If-None-Match, If-Unmodified-Since, X-GitHub-OTP, X-Requested-With
+Access-Control-Allow-Methods: GET, POST, PATCH, PUT, DELETE
+Access-Control-Expose-Headers: ETag, Link, X-GitHub-OTP, X-RateLimit-Limit, X-RateLimit-Remaining, X-RateLimit-Reset, X-OAuth-Scopes, X-Accepted-OAuth-Scopes, X-Poll-Interval
+Access-Control-Max-Age: 86400
+Access-Control-Allow-Credentials: true
+</pre>
 
 ## JSON-P Callbacks
 
