Merge pull request #303 from jaimegago/master

Update README.md
2014-04-10 08:58:36 +02:00
parent 5495e0f96a 4502ed068d
commit 78fab41310
1 changed files with 1 additions and 0 deletions
@@ -69,6 +69,7 @@ Header set Access-Control-Allow-Origin "*"
 Header set Access-Control-Allow-Methods "GET, OPTIONS"
 Header set Access-Control-Allow-Headers "origin, authorization, accept"
 ```
+Note that using "\*" leaves your graphite instance quite open so you might want to consider using "http://my.graphite-dom.ain" in place of "\*"

 If your Graphite web is proteced by basic authentication, you have to enable the HTTP verb OPTIONS, origin
 (no wildcards are allowed in this case) and add Access-Control-Allow-Credentials. This looks like the following for Apache: