# API directory — disable directory listing and PHP error display in output
Options -Indexes
php_flag display_errors Off

# Allow cross-origin requests from browsers
<IfModule mod_headers.c>
    Header always set Access-Control-Allow-Origin "*"
    Header always set Access-Control-Allow-Methods "GET, OPTIONS"
    Header always set Access-Control-Allow-Headers "Content-Type, X-Requested-With"
</IfModule>
