app/controllers/tracks_controller.rb
# dirty hack to respond to OPTIONS request_method of XSS ajax calls
dirty hack to respond to OPTIONS request_method of XSS ajax calls
dirty hack to respond to OPTIONS request_method of XSS ajax calls
def options_response
     render :nothing => true, :status => 200
    response.headers['Access-Control-Allow-Origin'] = '*'
    response.headers['Access-Control-Allow-Methods'] = 'POST, GET, PUT, DELETE, OPTIONS'
    response.headers['Access-Control-Allow-Credentials'] = 'true'
    response.headers['Access-Control-Max-Age'] = '86400' 
    response.headers['Access-Control-Allow-Headers'] = 'X-Requested-With, X-HTTP-Method-Override, Content-Type, Accept'
  end
def options_response render :nothing => true , :status => 200 response . headers [ 'Access-Control-Allow-Origin' ] = '*' response . headers [ 'Access-Control-Allow-Methods' ] = 'POST, GET, PUT, DELETE, OPTIONS' response . headers [ 'Access-Control-Allow-Credentials' ] = 'true' response . headers [ 'Access-Control-Max-Age' ] = '86400' response . headers [ 'Access-Control-Allow-Headers' ] = 'X-Requested-With, X-HTTP-Method-Override, Content-Type, Accept' end
dirty hack to respond to OPTIONS request_method of XSS ajax calls
dirty hack to respond to OPTIONS request_method of XSS ajax calls
# 24 hours