access-control-preflight-request-must-not-contain-cookie.py (609B)
1 def main(request, response): 2 if request.method == u"OPTIONS" and request.cookies.get(b"foo"): 3 response.status = 400 4 else: 5 response.headers.set(b"Cache-Control", b"no-store") 6 response.headers.set(b"Access-Control-Allow-Origin", request.headers.get(b"origin")) 7 response.headers.set(b"Access-Control-Allow-Credentials", b"true") 8 response.headers.set(b"Access-Control-Allow-Headers", b"X-Proprietary-Header") 9 response.headers.set(b"Connection", b"close") 10 11 if request.cookies.get(b"foo"): 12 response.content = request.cookies[b"foo"].value