···55555656 # we're always going to reply with json
5757 content_type :json
5858+5959+ # set CORS headers for safari extension
6060+ response.headers["Access-Control-Allow-Origin"] = "file://"
6161+ # just parrot back whatever safari asked for
6262+ response.headers["Access-Control-Allow-Methods"] =
6363+ request.env["HTTP_ACCESS_CONTROL_REQUEST_METHOD"]
6464+ response.headers["Access-Control-Allow-Headers"] =
6565+ request.env["HTTP_ACCESS_CONTROL_REQUEST_HEADERS"]
5866 end
59676068 register Rubywarden::Routing::Api
6169 register Rubywarden::Routing::Icons
6270 register Rubywarden::Routing::Identity
6371 register Rubywarden::Routing::Attachments
7272+7373+ options /.*/ do
7474+ # empty response just to respond with CORS headers
7575+ end
6476 end
6577end