fix cors and cors unittests, fix #324

1 files changed, 1 insertions, 0 deletions

diff --git a/external/newsapi.php b/external/newsapi.php
index 489f27f72..c5fd5e567 100644
--- a/external/newsapi.php
+++ b/external/newsapi.php
@@ -89,6 +89,7 @@ class NewsAPI extends Controller {
 		$response->addHeader('Access-Control-Allow-Origin', $origin);
 		$response->addHeader('Access-Control-Allow-Methods', 'PUT, POST, GET, DELETE');
 		$response->addHeader('Access-Control-Allow-Credentials', 'true');
+		$response->addHeader('Access-Control-Max-Age', '1728000');
 		$response->addHeader('Access-Control-Allow-Headers', 'Authorization, Content-Type');
 		return $response;
 	}