More infos on CORS in README

Again #25.
anselmh · Feb 24, 2015 · 474e8fd · 474e8fd
1 parent d8132d9
commit 474e8fd
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/README.md b/README.md
@@ -85,6 +85,8 @@ For example you need to set the header to:
 
 This should fix [the issue](https://github.com/anselmh/object-fit/issues/7). If you also need to support credentials, [you can’t use `*`](#25) but need the server reply with two headers (server needs also to reply with `Access-Control-Allow-Credentials: true`), one of which includes the origin in question.
 
+It is recommended to add the attribute `crossorigin="use-credentials"` to your CSS `link` element that is called from the external resource to indicate what type of CORS the server should reply with.
+
 In case you can’t alter the CSP / CORS settings of the server in question, you can disable parsing external CSS files in the config of the call:
 
 	<script>