allows setting CORS headers.
- cors_origin sets Access-Control-Allow-Origin directly
- cors_origin_pat allows setting Access-Control-Allow-Origin via regular expression, since the header spec itself doesn’t support complex access[1]
- cors_credentials sets Access-Control-Allow-Credentials: true
To allow CORS from everywhere:
ipython notebook —NotebookApp.cors_origin='*'