From 4bd2562edf5a82c6d58a4c805bdbe4ff31483b6b Mon Sep 17 00:00:00 2001
From: Hugo Roussille <hugo.roussille@ens.fr>
Date: Wed, 13 Sep 2017 15:57:57 +0200
Subject: [PATCH] django-cors-headers for cross-domain AJAX

---
 cof/settings/common.py | 2 ++
 requirements.txt       | 1 +
 2 files changed, 3 insertions(+)

diff --git a/cof/settings/common.py b/cof/settings/common.py
index ba0b6044..fba32743 100644
--- a/cof/settings/common.py
+++ b/cof/settings/common.py
@@ -91,9 +91,11 @@ INSTALLED_APPS = [
     'modelcluster',
     'taggit',
     'kfet.cms',
+    'corsheaders',
 ]
 
 MIDDLEWARE_CLASSES = [
+    'corsheaders.middleware.CorsMiddleware',
     'django.contrib.sessions.middleware.SessionMiddleware',
     'django.middleware.common.CommonMiddleware',
     'django.middleware.csrf.CsrfViewMiddleware',
diff --git a/requirements.txt b/requirements.txt
index f3964212..b28b939e 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -25,6 +25,7 @@ channels==1.1.5
 python-dateutil
 wagtail==1.10.*
 wagtailmenus==2.2.*
+django-cors-headers==2.1.0
 
 # Production tools
 wheel