Merge branch 'xss-bug' into 'develop'

http 跨域配置



See merge request !195

config/application.rb

@@ -18,7 +18,7 @@ module RedmineApp
     # -- all .rb files in that directory are automatically loaded.
 
     #verifier if email is real
-   
+
 
     config.generators do |g|
          g.test_framework :rspec,
@@ -80,7 +80,7 @@ module RedmineApp
       allow do
         origins '*'
         # location of your API
-        resource '/api/*', :headers => :any, :methods => [:get, :post, :options, :put]
+        resource '*', :headers => :any, :methods => [:get, :post, :options, :put]
       end
     end