--- /dev/null
+<?php
+
+namespace Cubist\Backpack\Middleware;
+
+use Closure;
+
+class CORSMiddleware
+{
+ public function handle($request, Closure $next)
+ {
+ $response = $next($request);
+ $response->headers->set('Access-Control-Allow-Origin', '*');
+ $response->headers->set('Access-Control-Allow-Methods', 'POST, GET, OPTIONS, PUT, DELETE');
+ $response->headers->set('Access-Control-Allow-Headers', 'Content-Type, Accept, Authorization, X-Requested-With, Application', 'ip');
+ return $response;
+ }
+}