Skip to content

Datasette should serve Access-Control-Max-Age #2079

New issue
New issue
Closed
Closed
Datasette should serve Access-Control-Max-Age#2079
Labels
enhancementjson-apiperformance
@simonw

Description

@simonw
simonw
opened on May 25, 2023

Currently the CORS headers served are:

datasette/datasette/utils/__init__.py

Lines 1139 to 1143 in 9584879

def add_cors_headers(headers):
headers["Access-Control-Allow-Origin"] = "*"
headers["Access-Control-Allow-Headers"] = "Authorization, Content-Type"
headers["Access-Control-Expose-Headers"] = "Link"
headers["Access-Control-Allow-Methods"] = "GET, POST, HEAD, OPTIONS"

Serving Access-Control-Max-Age: 600 would allow browsers to cache that for 10 minutes, avoiding additional CORS pre-flight OPTIONS requests during that time.

Metadata

Metadata

Assignees

No one assigned

    Labels

    enhancementjson-apiperformance

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions