optimize: AfterOPTIONSHeaders.js,多添加一个响应头 Cross-Origin-Resource-Policy

pull/415/head
王良 2024-12-05 11:27:37 +08:00
parent cbc3f00964
commit 6a20f0da75
1 changed files with 3 additions and 2 deletions

View File

@ -7,13 +7,14 @@ module.exports = {
responseIntercept (context, interceptOpt, req, res, proxyReq, proxyRes, ssl, next) { responseIntercept (context, interceptOpt, req, res, proxyReq, proxyRes, ssl, next) {
const { rOptions, log } = context const { rOptions, log } = context
if (rOptions.method === 'OPTIONS' || rOptions.headers.origin == null) { if (rOptions.method === 'OPTIONS') {
return return
} }
const headers = { const headers = {
'Access-Control-Allow-Credentials': 'true', 'Access-Control-Allow-Credentials': 'true',
'Access-Control-Allow-Origin': rOptions.headers.origin, 'Access-Control-Allow-Origin': '*',
'Cross-Origin-Resource-Policy': interceptOpt.optionsCrossPolicy || 'cross-origin',
} }
res.setHeader('DS-AfterOPTIONSHeaders-Interceptor', '1') res.setHeader('DS-AfterOPTIONSHeaders-Interceptor', '1')