api/config/packages/nelmio_cors.yaml
nelmio_cors:
defaults:
origin_regex: true
allow_origin: ['*']
allow_methods: ['GET', 'OPTIONS', 'POST', 'PUT', 'PATCH', 'DELETE']
allow_headers: ['Content-Type', 'Authorization', 'X-LOCALE']
expose_headers: ['Content-Disposition', 'Content-Length', 'Link']
max_age: 3600
paths:
'^/':
origin_regex: true
allow_origin: ['*']
allow_methods: ['GET', 'OPTIONS', 'POST', 'PUT', 'PATCH', 'DELETE']
allow_headers: ['Content-Type', 'Authorization', 'X-LOCALE']
expose_headers: [Content-Disposition', 'Content-Length', 'Link']
max_age: 3600