public/index.php line 22

1. <?php
3.   // respond to preflights
4.   if ($_SERVER['REQUEST_METHOD'] == 'OPTIONS') {
5.     // return only the headers and not the content
6.     // only allow CORS if we're doing a GET - i.e. no saving for now.
7.     if (isset($_SERVER['HTTP_ACCESS_CONTROL_REQUEST_METHOD']) && $_SERVER['HTTP_ACCESS_CONTROL_REQUEST_METHOD'] == 'POST') {
8.       header('Access-Control-Allow-Origin: *');
9.       header('Access-Control-Allow-Methods: GET, POST, PATCH, PUT, DELETE, OPTIONS');
10.       header('Access-Control-Allow-Headers: *');
11.     }
12.     exit;
13.   } else {
14.     header('Access-Control-Allow-Origin: *');
15.     header('Access-Control-Allow-Methods: GET, POST, PATCH, PUT, DELETE, OPTIONS');
16.     header('Access-Control-Allow-Headers: Content-Type, x-requested-with');
17.     header('Access-Control-Max-Age: 86400');
18.   }
20. use App\Kernel;
22. require_once dirname(__DIR__).'/vendor/autoload_runtime.php';
24. return function (array $context) {
25.     return new Kernel($context['APP_ENV'], (bool) $context['APP_DEBUG']);
26. };