are you using Chrome by any chance? I noticed that it complains about some other headers I try to set in the same way.
On Wed, Jan 16, 2013 at 4:21 PM, Dave Lazar <hunkyb...@gmail.com> wrote: > As I mentioned... this a CORS setup, so obviously it is cross-site. That > part of the stack works perfect, and the response is indeed dished out to > the browser as expected. The only problem I have is Prototype not liking > the header... I am looking for the tip that will silence that... > > Thanks > > > On Wednesday, January 16, 2013 5:12:43 PM UTC-5, DaveK wrote: >> >> is the page served from http://test.heroku.com ? >> >> If not, it's a cross-site scripting security issue. >> > -- > You received this message because you are subscribed to the Google Groups > "Prototype & script.aculo.us" group. > To view this discussion on the web visit > https://groups.google.com/d/msg/prototype-scriptaculous/-/xcPk0scKJdkJ. > > To post to this group, send email to > prototype-scriptaculous@googlegroups.com. > To unsubscribe from this group, send email to > prototype-scriptaculous+unsubscr...@googlegroups.com. > For more options, visit this group at > http://groups.google.com/group/prototype-scriptaculous?hl=en. > -- Shane McCarron halindr...@gmail.com -- You received this message because you are subscribed to the Google Groups "Prototype & script.aculo.us" group. To post to this group, send email to prototype-scriptaculous@googlegroups.com. To unsubscribe from this group, send email to prototype-scriptaculous+unsubscr...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/prototype-scriptaculous?hl=en.