cockpit-project/cockpit — pull request #743 by stefwalter (2014-06-20 09:56:08+00:00)
Title: ws: Add a /ping REST request for checking if cockpit is running

We implement unrestricted CORS on /ping which allows callers
embedding Cockpit to check if it is running on a given server
before trying to embed it.

From a security perspective, there are *many* other ways to check
if Cockpit is running on a particular server from a third-party
website such as loading an image or script from Cockpit. This
does not weaken security, simply enables the correct approach
for doing such a check.

http://www.w3.org/TR/cors/