optimize: AfterOPTIONSHeaders.js，多添加一个响应头 Cross-Origin-Resource-Policy

docmirror · Dec 5, 2024 · 6a20f0d · 6a20f0d
1 parent cbc3f00
commit 6a20f0d
Showing 1 changed file with 3 additions and 2 deletions.
diff --git a/packages/mitmproxy/src/lib/interceptor/impl/res/AfterOPTIONSHeaders.js b/packages/mitmproxy/src/lib/interceptor/impl/res/AfterOPTIONSHeaders.js
@@ -7,13 +7,14 @@ module.exports = {
   responseIntercept (context, interceptOpt, req, res, proxyReq, proxyRes, ssl, next) {
     const { rOptions, log } = context
 
-    if (rOptions.method === 'OPTIONS' || rOptions.headers.origin == null) {
+    if (rOptions.method === 'OPTIONS') {
       return
     }
 
     const headers = {
       'Access-Control-Allow-Credentials': 'true',
-      'Access-Control-Allow-Origin': rOptions.headers.origin,
+      'Access-Control-Allow-Origin': '*',
+      'Cross-Origin-Resource-Policy': interceptOpt.optionsCrossPolicy || 'cross-origin',
     }
 
     res.setHeader('DS-AfterOPTIONSHeaders-Interceptor', '1')