CORS request fails with SYNO.Photo.Thumbnail API - hogehoge666/syno_moments_slider GitHub Wiki

If you modify scgi_param to include access-control-allow-origin and access-control-allow-credentials, SYNO.Photo.Browse.Timeline API and SYNO.Photo.Browse.Item API would accept CORS requests.

SYNO.Photo.Thumbnail API doesn't accept CORS requests. The API response doesn't have access-control-allow-origin and access-control-allow-credentials headers. PHP app must have overwritten the header.

See issue #4.