From 9dbe01fb29b75ddac36f714757bd4cfee238a0bb Mon Sep 17 00:00:00 2001
From: Frank Schubert <fronk@fronk.at>
Date: Wed, 14 Sep 2022 15:02:38 +0200
Subject: [PATCH] Added CORS headers for yaml file

---
 public/docs/.htaccess | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/public/docs/.htaccess b/public/docs/.htaccess
index 5cd648273..3f0414a6f 100644
--- a/public/docs/.htaccess
+++ b/public/docs/.htaccess
@@ -1 +1,6 @@
+SetEnvIf Origin "^(https://docs.thetool.xinon.at|https://editor.swagger.io|.*abstellgleis.at)$" AccessControlAllowOrigin=$0
+Header add Access-Control-Allow-Origin %{AccessControlAllowOrigin}e env=AccessControlAllowOrigin
+Header add Access-Control-Allow-Methods: "GET,POST,OPTIONS"
+Header add Access-Control-Allow-Headers: "X-Api-Key"
+
 Header add Cach-control: "no-store, no-cache, must-revalidate"