From 20135cde608a4388b0525eccbadf68fa66e9f825 Mon Sep 17 00:00:00 2001 From: Derk-Jan Hartman Date: Sun, 21 Apr 2013 16:38:23 +0200 Subject: [PATCH] ResourceLoader: Serve stylesheets with "Access-Control-Allow-Origin: *" This allows Javascript to access our styling information (cssRules and related cross domain protected dom information) even if it is hosted on a different domain. Bug: 25886 Change-Id: I8e05c13ae1a1589fd120d5c439b1a7128ce2b659 --- includes/resourceloader/ResourceLoader.php | 1 + 1 file changed, 1 insertion(+) diff --git a/includes/resourceloader/ResourceLoader.php b/includes/resourceloader/ResourceLoader.php index 543bd1d300..d2ddea39d7 100644 --- a/includes/resourceloader/ResourceLoader.php +++ b/includes/resourceloader/ResourceLoader.php @@ -563,6 +563,7 @@ class ResourceLoader { } if ( $context->getOnly() === 'styles' ) { header( 'Content-Type: text/css; charset=utf-8' ); + header( 'Access-Control-Allow-Origin: *' ); } else { header( 'Content-Type: text/javascript; charset=utf-8' ); } -- 2.20.1