{"action":"closed","issue":{"url":"https://api.github.com/repos/elastic/elasticsearch/issues/17534","repository_url":"https://api.github.com/repos/elastic/elasticsearch","labels_url":"https://api.github.com/repos/elastic/elasticsearch/issues/17534/labels{/name}","comments_url":"https://api.github.com/repos/elastic/elasticsearch/issues/17534/comments","events_url":"https://api.github.com/repos/elastic/elasticsearch/issues/17534/events","html_url":"https://github.com/elastic/elasticsearch/issues/17534","id":145945223,"number":17534,"title":"http.cors ES 2.3","user":{"login":"chanserv","id":4001014,"avatar_url":"https://avatars.githubusercontent.com/u/4001014?v=3","gravatar_id":"","url":"https://api.github.com/users/chanserv","html_url":"https://github.com/chanserv","followers_url":"https://api.github.com/users/chanserv/followers","following_url":"https://api.github.com/users/chanserv/following{/other_user}","gists_url":"https://api.github.com/users/chanserv/gists{/gist_id}","starred_url":"https://api.github.com/users/chanserv/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/chanserv/subscriptions","organizations_url":"https://api.github.com/users/chanserv/orgs","repos_url":"https://api.github.com/users/chanserv/repos","events_url":"https://api.github.com/users/chanserv/events{/privacy}","received_events_url":"https://api.github.com/users/chanserv/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":2,"created_at":"2016-04-05T10:14:30Z","updated_at":"2016-04-06T11:12:47Z","closed_at":"2016-04-06T11:12:47Z","body":"**Elasticsearch version**:\r\n2.3\r\n**JVM version**:\r\n1.8.0\r\n**OS version**:\r\nWindows 7\r\n**Description of the problem including expected versus actual behavior**:\r\nI have set cors conf in elasticsearch.yml like this\r\n`http.cors.enabled : true\r\nhttp.cors.allow-origin : \"*\"\r\nhttp.cors.allow-methods : OPTIONS, HEAD, GET, POST, PUT, DELETE\r\nhttp.cors.allow-headers : X-Requested-With,X-Auth-Token,Content-Type, Content-Length`\r\n\r\nWhen requesting elasticsearch from file:///C:/elastic/index.html i got the following error\r\n`Request header field Content-Type is not allowed by Access-Control-Allow-Headers`\r\n\r\nI switched to 2.2 version and i set the same parameters and it works like a charm\r\n\r\n**Steps to reproduce**:\r\n 1.Set cors parameters in elasticsearch.yml\r\n 2.Request elasticsearch from an url like this: file:///c:/.."}}