webdav: Add Access-Control-Max-Age header for CORS preflight caching - fixes #5078

2025-10-24 10:19:22 +01:00
parent 6663eb346f
commit 4f60f8915d
1 changed files with 1 additions and 0 deletions
@@ -191,6 +191,7 @@ func MiddlewareCORS(allowOrigin string) Middleware {
 				w.Header().Add("Access-Control-Allow-Origin", allowOrigin)
 				w.Header().Add("Access-Control-Allow-Headers", "authorization, Content-Type")
 				w.Header().Add("Access-Control-Allow-Methods", "COPY, DELETE, GET, HEAD, LOCK, MKCOL, MOVE, OPTIONS, POST, PROPFIND, PROPPATCH, PUT, TRACE, UNLOCK")
+				w.Header().Add("Access-Control-Max-Age", "86400")
 			}

 			next.ServeHTTP(w, r)