add another CORS header to allow client to send any headers

1 files changed, 5 insertions, 0 deletions

diff --git a/src/mhd/mhd_responses.c b/src/mhd/mhd_responses.c
index d26f533e7..d54945c65 100644
--- a/src/mhd/mhd_responses.c
+++ b/src/mhd/mhd_responses.c
@@ -284,6 +284,11 @@ TALER_MHD_reply_cors_preflight (struct MHD_Connection *connection)
   /* This adds the Access-Control-Allow-Origin header.
    * All endpoints of the exchange allow CORS. */
   TALER_MHD_add_global_headers (resp);
+  GNUNET_break (MHD_YES ==
+                MHD_add_response_header (resp,
+                                         // Not available as MHD constant yet
+                                         "Access-Control-Allow-Headers",
+                                         "*"));
   GNUNET_assert (MHD_YES == MHD_queue_response (connection, MHD_HTTP_NO_CONTENT,
                                                 resp));
   return MHD_YES;