Merge pull request #299 from github/update-cors-examples

jasonrudolph · jasonrudolph · commit 40ea112e4441 · 2013-09-09T09:02:48.000-07:00
Update headers in CORS examples
diff --git a/content/v3.md b/content/v3.md
@@ -442,16 +442,16 @@ Here's a sample request for a browser hitting [Calendar About Nothing](http://ca
 
     $ curl -i https://api.github.com -H "Origin: http://calendaraboutnothing.com"
     HTTP/1.1 302 Found
-    Access-Control-Allow-Origin: http://calendaraboutnothing.com
+    Access-Control-Allow-Origin: *
     Access-Control-Expose-Headers: ETag, Link, X-RateLimit-Limit, X-RateLimit-Remaining, X-RateLimit-Reset, X-OAuth-Scopes, X-Accepted-OAuth-Scopes
     Access-Control-Allow-Credentials: true
 
 This is what the CORS preflight request looks like:
 
     $ curl -i https://api.github.com -H "Origin: http://calendaraboutnothing.com" -X OPTIONS
     HTTP/1.1 204 No Content
-    Access-Control-Allow-Origin: http://calendaraboutnothing.com
-    Access-Control-Allow-Headers: Authorization, X-Requested-With
+    Access-Control-Allow-Origin: *
+    Access-Control-Allow-Headers: Authorization, Content-Type, If-Match, If-Modified-Since, If-None-Match, If-Unmodified-Since, X-Requested-With
     Access-Control-Allow-Methods: GET, POST, PATCH, PUT, DELETE
     Access-Control-Expose-Headers: ETag, Link, X-RateLimit-Limit, X-RateLimit-Remaining, X-RateLimit-Reset, X-OAuth-Scopes, X-Accepted-OAuth-Scopes
     Access-Control-Max-Age: 86400
