Allow Date header through CORS (#8804)

2 files changed, 2 insertions, 1 deletions

diff --git a/changelog.d/8804.feature b/changelog.d/8804.feature
new file mode 100644

index 0000000000..a907c8106c
--- /dev/null
+++ b/changelog.d/8804.feature
@@ -0,0 +1 @@
+Allow Date header through CORS. Contributed by Nicolas Chamo.
diff --git a/synapse/http/server.py b/synapse/http/server.py

index 46cdfad04a..6a4e429a6c 100644
--- a/synapse/http/server.py
+++ b/synapse/http/server.py
@@ -674,7 +674,7 @@ def set_cors_headers(request: Request):
     )
     request.setHeader(
         b"Access-Control-Allow-Headers",
-        b"Origin, X-Requested-With, Content-Type, Accept, Authorization",
+        b"Origin, X-Requested-With, Content-Type, Accept, Authorization, Date",
     )