access-control-preflight-request-headers-origin.py (560B)
1 def main(request, response): 2 response.headers.set(b"Cache-Control", b"no-store") 3 response.headers.set(b"Access-Control-Allow-Origin", b"*") 4 5 if request.method == u"OPTIONS": 6 if b"origin" in request.headers.get(b"Access-Control-Request-Headers").lower(): 7 response.status = 400 8 response.content = b"Error: 'origin' included in Access-Control-Request-Headers" 9 else: 10 response.headers.set(b"Access-Control-Allow-Headers", b"x-pass") 11 else: 12 response.content = request.headers.get(b"x-pass")