This project is not covered by Drupal’s security advisory policy.

This is an authentication module for Services (http://drupal.org/project/services).

It let's you specify a whitelist of domains. Domains in this whitelist will then
be allowed to make cross domain XMLHttpRequests. This works by setting the
*Access-Control-Allow-Origin* header to match the origin of the requester.

We also perform a server side check, and if the domain is not present in the
white list the request is denied access directly, which saves your server
resources.

*Tested with Services 3.x and RESTServer*

Project information

Releases