This is a follow on to the +1 added to indicating that adding the jetty-servlets.jar (and a bit of configuration) correctly enables CORS.
Add instructions to the user guide since this is a common task
Hunting down the correct jar is a bother and we could include it by default (add a dependency on jetty-servlets.jar).
We could added the commented out config entries to our web.xml to help make set up easier..
The following was suggested on GEOS-6605:
~jnewmoyer if you are still interested in - it should now be easier to enable CORS out of the box.
I cracked open the geoserver-2.10.2-bin and geoserver-2.10.2-war and don't see jetty-servlets-xxx.jar anywhere in the server lib or WEB-INF/lib.
In my experience this needs to be in the geoserver/WEB-INF/lib in order for the CORS filter to work in the web.xml. Along with the jetty-util jar.
You are correct I do not see it in the bin/lib folder, reopening.
Hi Torben, wasn't this fixed already?