mirror of
https://github.com/servo/servo.git
synced 2025-07-13 02:13:40 +01:00
51 lines
2.1 KiB
Python
51 lines
2.1 KiB
Python
def main(request, response):
|
|
origin = request.headers['origin']
|
|
response.headers.set('Access-Control-Allow-Origin', origin)
|
|
|
|
tao = request.GET.first('tao')
|
|
|
|
if tao == 'zero':
|
|
# zero TAO value, fail
|
|
pass
|
|
elif tao == 'wildcard':
|
|
# wildcard, pass
|
|
response.headers.set('Timing-Allow-Origin', '*')
|
|
elif tao == 'null':
|
|
# null, fail unless it's an opaque origin
|
|
response.headers.set('Timing-Allow-Origin', 'null')
|
|
elif tao == 'Null':
|
|
# case-insentive null, fail
|
|
response.headers.set('Timing-Allow-Origin', 'Null')
|
|
elif tao == 'origin':
|
|
# case-sensitive match for origin, pass
|
|
response.headers.set('Timing-Allow-Origin', origin)
|
|
elif tao.startswith('origin_port'):
|
|
# case-sensitive match for origin and port, pass
|
|
origin_parts = origin.split(':')
|
|
host = origin_parts[0] + ':' + origin_parts[1]
|
|
port = tao.split('origin_port_')[1]
|
|
response.headers.set('Timing-Allow-Origin', host + ':' + port)
|
|
elif tao == 'space':
|
|
# space separated list of origin and wildcard, fail
|
|
response.headers.set('Timing-Allow-Origin', (origin + ' *'))
|
|
elif tao == 'multi':
|
|
# more than one TAO values, separated by comma, pass
|
|
response.headers.set('Timing-Allow-Origin', origin)
|
|
response.headers.append('Timing-Allow-Origin', '*')
|
|
elif tao == 'multi_wildcard':
|
|
# multiple wildcards, separated by comma, pass
|
|
response.headers.set('Timing-Allow-Origin', '*')
|
|
response.headers.append('Timing-Allow-Origin', '*')
|
|
elif tao == 'match_origin':
|
|
# contains a match of origin, separated by comma, pass
|
|
response.headers.set('Timing-Allow-Origin', origin)
|
|
response.headers.append('Timing-Allow-Origin', "fake")
|
|
elif tao == 'match_wildcard':
|
|
# contains a wildcard, separated by comma, pass
|
|
response.headers.set('Timing-Allow-Origin', "fake")
|
|
response.headers.append('Timing-Allow-Origin', '*')
|
|
elif tao == 'uppercase':
|
|
# non-case-sensitive match for origin, fail
|
|
response.headers.set('Timing-Allow-Origin', origin.upper())
|
|
else:
|
|
pass
|