From 7e4bb532be0659b9ca6484bb2e25090a8b0adc73 Mon Sep 17 00:00:00 2001
From: "francesco.mangiacrapa" <francesco.mangiacrapa@isti.cnr.it>
Date: Wed, 18 Dec 2024 12:21:48 +0100
Subject: [PATCH] Added 'always' directive as default to the
 'Access-Control-Allow-Origin', see #28488#note-24

---
 templates/nginx-cors.conf.j2 | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/templates/nginx-cors.conf.j2 b/templates/nginx-cors.conf.j2
index d4bb229..4ae8318 100644
--- a/templates/nginx-cors.conf.j2
+++ b/templates/nginx-cors.conf.j2
@@ -53,7 +53,7 @@ proxy_hide_header Access-Control-Allow-Origin;
 add_header 'Access-Control-Allow-Origin' '{{ nginx_cors_acl_origin | default("$http_origin") }}';
 {% else %}
 proxy_hide_header Access-Control-Allow-Origin;
-add_header 'Access-Control-Allow-Origin' '{{ nginx_access_control_allow_origin_src | default("*") }}';
+add_header 'Access-Control-Allow-Origin' '{{ nginx_access_control_allow_origin_src | default("*") }}' always;
 {% endif %}
 if ($request_method = OPTIONS ) {
     return 204;