[SLING-6946] Make HC servlet send CORS header Access-Control-Allow-Origin

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Unresolved
• Fix Version/s: Health Check Core 1.2.10
• Component/s: Health Check
• Assignee: Unassigned
• Reporter: Georg Henzler
• Created: 08/Jun/17 21:01
• Updated: 29/Nov/17 23:38

Description

There is no reason why the HC servlet should not be allowed to be called from a webpage that was served from another domain. Hence the header Access-Control-Allow-Origin shall be added with a default value * (configurable in case it is really needed, but allowing general access as default makes sense here).

Concrete Use Case: A Jenkins HTML Report that aggregates HC results from multiple sling instances.

Issue Links

• is related to: SLING-7246 Document changes for SLING-6855 and SLING-6946