8ae48fb6 by Gary Katsevman

Add some info about cors and withcredentials

1 parent 60113a36
...@@ -60,7 +60,12 @@ Type: `boolean` ...@@ -60,7 +60,12 @@ Type: `boolean`
60 When the `withCredentials` property is set to `true`, all XHR requests for 60 When the `withCredentials` property is set to `true`, all XHR requests for
61 manifests and segments would have `withCredentials` set to `true` as well. This 61 manifests and segments would have `withCredentials` set to `true` as well. This
62 enables storing and passing cookies from the server that the manifests and 62 enables storing and passing cookies from the server that the manifests and
63 segments live on. 63 segments live on. This has some implications on CORS because when set, the
64 `Access-Control-Allow-Origin` header cannot be set to `*`, also, the response
65 headers require the addition of `Access-Control-Allow-Credentials` header which
66 is set to `true`.
67 See [html5rocks's article](http://www.html5rocks.com/en/tutorials/cors/)
68 for more info
64 69
65 ### Runtime Properties 70 ### Runtime Properties
66 #### player.hls.master 71 #### player.hls.master
......