elasticsearch/elasticsearch — pull request #7059 by spinscale (2014-07-28 13:13:17+00:00)
Title: CORS: Allowed to configure allow-credentials header to work via SSL

This adds support to return the "Access-Control-Allow-Credentials" header
if needed, so CORS will work flawlessly with authenticated applications.

Closes #6380