Map of whether user credentials are supported, based on URL patterns.

Example:

 cors.allow-credentials-for-url-pattern[{path\:.*}]=true 

See Javadoc for more information on CORS configuration for the delivery applications.

Map of whether private network access is supported, based on URL patterns.

Example:

 cors.allow-private-network-for-url-pattern[{path\:.*}]=true 

See Javadoc for more information on CORS configuration for the delivery applications.

Map of headers that a pre-flight request can list as allowed for use during an actual request, based on URL patterns.

A header name is not required to be listed if it is one of: Cache-Control, Content-Language, Expires, Last-Modified or Pragma.

Example:

 cors.allowed-headers-for-url-pattern[{path\:.*}]=x-requested-with,x-csrf-token 

See Javadoc for more information on CORS configuration for the delivery applications.

Map of HTTP methods to allow, based on URL patterns.

Example:

 cors.allowed-methods-for-url-pattern[{path\:.*}]=GET,POST,PUT 

See Javadoc for more information on CORS configuration for the delivery applications.

Map of origin patters to allow, based on URL patterns.

Alternative to #allowedOriginsForUrlPattern that supports more flexible origins patterns with "*" anywhere in the host name in addition to port lists.

Example:

 cors.allowed-origin-patters-for-url-pattern[{path\:.*}]=https://*.domain1.com,https://domain2.com:[8080,8081] 

See Javadoc for more information on CORS configuration for the delivery applications.

Map of origins to allow, based on URL patterns.

Example:

 cors.allowed-origins-for-url-pattern[{path\:.*}]=https://domain1.com,https://domain2.com 

E.g. in the preview CAE, this property may be configured with the Studio host in order to allow AJAX requests from the Studio to the CAE.

See Javadoc for more information on CORS configuration for the delivery applications.

Map of response headers other than simple headers (i.e. Cache-Control, Content-Language, Content-Type, Expires, Last-Modified or Pragma) that an actual response might have and can be exposed, based on URL patterns.

Example:

 cors.exposed-headers-for-url-pattern[{path\:.*}]=x-requested-with,x-csrf-token 

See Javadoc for more information on CORS configuration for the delivery applications.

Map of how long, as a duration, the response from a pre-flight request can be cached by clients, based on URL patterns.

Example:

 cors.max-age-for-url-pattern[{path\:.*}]=3m 

See Javadoc for more information on CORS configuration for the delivery applications.