From f2e9d412d16295b4ce20a32d6895b10e80af4311 Mon Sep 17 00:00:00 2001 From: Denis Ledoux Date: Fri, 3 Jun 2016 13:22:56 +0200 Subject: [PATCH] [FIX] web: allow cross origin on /web/webclient/qweb This revision is similar to edc4b0b9bb87aeae2e923a5a0d93e12ee171906d Since revision 7f8fe1076660ab949a050c04443abd160555e08a the route `/web/webclient/qweb` must allow cross origin so this route can be called from HTTP pages e.g. To allow a HTTP loaded point of sale to call this route in HTTPS opw-679288 --- addons/web/controllers/main.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/addons/web/controllers/main.py b/addons/web/controllers/main.py index 18a9d55e601..4afeb1a70ce 100644 --- a/addons/web/controllers/main.py +++ b/addons/web/controllers/main.py @@ -520,7 +520,7 @@ class WebClient(http.Controller): headers = [('Content-Type', 'application/javascript'), ('Cache-Control', 'max-age=%s' % (36000))] return request.make_response(momentjs_locale, headers) - @http.route('/web/webclient/qweb', type='http', auth="none") + @http.route('/web/webclient/qweb', type='http', auth="none", cors="*") def qweb(self, mods=None, db=None): files = [f[0] for f in manifest_glob('qweb', addons=mods, db=db)] last_modified = get_last_modified(files)