static: Add Timing-Allow-Origin: * to allow sentry data timing.

This is required for the browser to provide detailed timing
information about resource fetches from other domains[^1].

[^1]: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Timing-Allow-Origin
This commit is contained in:
Alex Vandiver
2023-04-12 18:33:53 +00:00
committed by Tim Abbott
parent e44520c8fe
commit a9f51a0c02
2 changed files with 3 additions and 0 deletions

View File

@@ -11,6 +11,7 @@ location /static/ {
alias /home/zulip/prod-static/;
include /etc/nginx/zulip-include/headers;
add_header Access-Control-Allow-Origin *;
add_header Timing-Allow-Origin *;
# Set a nonexistent path, so we just serve the nice Django 404 page.
error_page 404 /django_static_404.html;
@@ -20,6 +21,7 @@ location /static/ {
location ~ '\.[0-9a-f]{12}\.|[./][0-9a-f]{20}\.' {
include /etc/nginx/zulip-include/headers;
add_header Access-Control-Allow-Origin *;
add_header Timing-Allow-Origin *;
add_header Cache-Control "public, max-age=31536000, immutable";
}
}