Liberty -  Liberty -  Liberty -  Liberty -  Liberty -  Liberty -  Liberty -  Liberty - 
Use the following options to alter CORS-related settings.
| Configuration option = Default value | Description | 
|---|---|
| [cors] | |
| allow_credentials=True | (BoolOpt) Indicate that the actual request can include user credentials | 
| allow_headers=Content-Type, Cache-Control, Content-Language, Expires, Last-Modified, Pragma | (ListOpt) Indicate which header field names may be used during the actual request. | 
| allow_methods=GET, POST, PUT, DELETE, OPTIONS | (ListOpt) Indicate which methods can be used during the actual request. | 
| allowed_origin=None | (StrOpt) Indicate whether this resource may be shared with the domain received in the requests "origin" header. | 
| expose_headers=Content-Type, Cache-Control, Content-Language, Expires, Last-Modified, Pragma | (ListOpt) Indicate which headers are safe to expose to the API. Defaults to HTTP Simple Headers. | 
| max_age=3600 | (IntOpt) Maximum cache age of CORS preflight requests. | 
| [cors.subdomain] | |
| allow_credentials=True | (BoolOpt) Indicate that the actual request can include user credentials | 
| allow_headers=Content-Type, Cache-Control, Content-Language, Expires, Last-Modified, Pragma | (ListOpt) Indicate which header field names may be used during the actual request. | 
| allow_methods=GET, POST, PUT, DELETE, OPTIONS | (ListOpt) Indicate which methods can be used during the actual request. | 
| allowed_origin=None | (StrOpt) Indicate whether this resource may be shared with the domain received in the requests "origin" header. | 
| expose_headers=Content-Type, Cache-Control, Content-Language, Expires, Last-Modified, Pragma | (ListOpt) Indicate which headers are safe to expose to the API. Defaults to HTTP Simple Headers. | 
| max_age=3600 | (IntOpt) Maximum cache age of CORS preflight requests. | 


