elasticsearch/elasticsearch — pull request #7642 by spinscale (2014-09-08 14:09:43+00:00)
Title: CORS: Disable by default

In order to deliver a more secure out-of-the-box configuration this commit
disables cross-origin resource sharing by default. It is possibly to enable it and create a more finegrained configuration anytime using the existing cors configuration parameters.

Closes #7151