enabled データベース設定 / Web / オプションⅡ Web CORS settings collection of objects 0 (disabled) or 1 (enabled) { host:"*.domain.org", methods:"post;delete" ] Cross Site Request Forgery { sessionCookieSameSite:"Lax" ] Strict (default) Lax None (Secure=automatically True) HTTPS (Secure=always True) Cookie WEB Server.start(settings) WEB SET HTTP HEADERでは設定できない WEB SET HTTP HEADERでもOK