[openstreetmap-website] Allow cross-origin request to API (#138)

[John Firebaugh]

This allows pure HTML/JS editors like iD to be embedded on third-party
sites.

I'm unclear if cgimap needs to handle this too. Would an OPTIONS request
for /api/0.6/map go to the rails port first?

You can merge this Pull Request by running:

  git pull https://github.com/jfirebaugh/openstreetmap-website cors

Or you can view, comment on it, or merge it online at:

  https://github.com/openstreetmap/openstreetmap-website/pull/138

-- Commit Summary --

  * Allow cross-origin request to API

-- File Changes --

M Gemfile (1)
M Gemfile.lock (3)
M config/application.rb (8)
A test/integration/cors_test.rb (31)

-- Patch Links --

https://github.com/openstreetmap/openstreetmap-website/pull/138.patch
https://github.com/openstreetmap/openstreetmap-website/pull/138.diff


---
Reply to this email directly or view it on GitHub:
https://github.com/openstreetmap/openstreetmap-website/pull/138
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstreetmap.org/pipermail/rails-dev/attachments/20121021/474daa74/attachment.html>