From 6a20f0da75dae168d290445f5198292e6ec0e2d7 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E7=8E=8B=E8=89=AF?= <841369634@qq.com>
Date: Thu, 5 Dec 2024 11:27:37 +0800
Subject: [PATCH] =?UTF-8?q?optimize:=20AfterOPTIONSHeaders.js=EF=BC=8C?=
 =?UTF-8?q?=E5=A4=9A=E6=B7=BB=E5=8A=A0=E4=B8=80=E4=B8=AA=E5=93=8D=E5=BA=94?=
 =?UTF-8?q?=E5=A4=B4=20Cross-Origin-Resource-Policy?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .../src/lib/interceptor/impl/res/AfterOPTIONSHeaders.js      | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/packages/mitmproxy/src/lib/interceptor/impl/res/AfterOPTIONSHeaders.js b/packages/mitmproxy/src/lib/interceptor/impl/res/AfterOPTIONSHeaders.js
index 355cb260..de721113 100644
--- a/packages/mitmproxy/src/lib/interceptor/impl/res/AfterOPTIONSHeaders.js
+++ b/packages/mitmproxy/src/lib/interceptor/impl/res/AfterOPTIONSHeaders.js
@@ -7,13 +7,14 @@ module.exports = {
   responseIntercept (context, interceptOpt, req, res, proxyReq, proxyRes, ssl, next) {
     const { rOptions, log } = context
 
-    if (rOptions.method === 'OPTIONS' || rOptions.headers.origin == null) {
+    if (rOptions.method === 'OPTIONS') {
       return
     }
 
     const headers = {
       'Access-Control-Allow-Credentials': 'true',
-      'Access-Control-Allow-Origin': rOptions.headers.origin,
+      'Access-Control-Allow-Origin': '*',
+      'Cross-Origin-Resource-Policy': interceptOpt.optionsCrossPolicy || 'cross-origin',
     }
 
     res.setHeader('DS-AfterOPTIONSHeaders-Interceptor', '1')