diff options
| author | Matthew Draper <matthew@trebex.net> | 2016-10-11 12:28:38 +1030 |
|---|---|---|
| committer | Matthew Draper <matthew@trebex.net> | 2016-10-11 12:28:38 +1030 |
| commit | f8c53eff7be9a5670e3c0da5851312977becb308 (patch) | |
| tree | 280b4a0070cbc7a275ca79eaf3bd1bcf298697da /actioncable/README.md | |
| parent | bc9dc418259f1db0f14ed895e8469b7839ef474b (diff) | |
| parent | 268c340b0909bd78259e58b1ed0b53133d924199 (diff) | |
| download | rails-f8c53eff7be9a5670e3c0da5851312977becb308.tar.gz rails-f8c53eff7be9a5670e3c0da5851312977becb308.tar.bz2 rails-f8c53eff7be9a5670e3c0da5851312977becb308.zip | |
Merge pull request #26568 from skateman/cable-sameorigin-as-host
Optionally allow ActionCable requests from the same host as origin
Diffstat (limited to 'actioncable/README.md')
| -rw-r--r-- | actioncable/README.md | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/actioncable/README.md b/actioncable/README.md index a0b7412dd4..30b86edd2e 100644 --- a/actioncable/README.md +++ b/actioncable/README.md @@ -340,6 +340,11 @@ To disable and allow requests from any origin: Rails.application.config.action_cable.disable_request_forgery_protection = true ``` +It is also possible to allow origins that are starting with the actual HTTP HOST header: +```ruby +Rails.application.config.action_cable.allow_same_origin_as_host = true +``` + ### Consumer Configuration Once you have decided how to run your cable server (see below), you must provide the server URL (or path) to your client-side setup. |