random-mirrors/cosmos-explorer
1
0
Fork 0
mirror of https://github.com/Azure/cosmos-explorer.git synced 2026-01-22 19:23:22 +00:00
Code Issues Packages Projects Releases Wiki Activity

Cleanup CORSByPass

Browse Source
This commit is contained in:
Sindhu Balasubramanian
2026-01-12 17:07:23 -08:00
parent 90c694d33c
commit de11ece337
1 changed files with 6 additions and 14 deletions
Download Patch File Download Diff File Expand all files Collapse all files

20
test/CORSBypass.ts
View File

@@ -11,7 +11,7 @@ export async function setupCORSBypass(page: Page) {
return;
}
//// Handle preflight (OPTIONS) requests separately.
// Handle preflight (OPTIONS) requests separately.
// These should not be forwarded to the target server.
if (request.method() === "OPTIONS") {
await route.fulfill({
@@ -20,8 +20,7 @@ export async function setupCORSBypass(page: Page) {
"Access-Control-Allow-Origin": origin,
"Access-Control-Allow-Credentials": "true",
"Access-Control-Allow-Methods": "GET,POST,PUT,DELETE,OPTIONS,HEAD",
"Access-Control-Request-Headers": "*, x-ms-continuation",
"Access-Control-Max-Age": "86400", // Cache preflight response for 1 day
"Access-Control-Allow-Headers": request.headers()["access-control-request-headers"] || "*",
Vary: "Origin",
},
});
@@ -35,21 +34,14 @@ export async function setupCORSBypass(page: Page) {
},
});
const responseHeaders = response.headers();
// Clean up any pre-existing CORS headers from the real response to avoid conflicts.
delete responseHeaders["access-control-allow-origin"];
delete responseHeaders["access-control-allow-credentials"];
await route.fulfill({
status: response.status(),
headers: {
...responseHeaders,
"Access-Control-Allow-Origin": origin,
"Access-Control-Allow-Credentials": "true",
"Access-Control-Allow-Methods": "GET,POST,PUT,DELETE,OPTIONS,HEAD",
...response.headers(),
"Access-Control-Allow-Origin": "*",
"Access-Control-Allow-Methods": "*",
"Access-Control-Allow-Headers": "*",
"Access-Control-Expose-Headers": "x-ms-continuation,x-ms-request-charge,x-ms-session-token",
Vary: "Origin",
"Access-Control-Allow-Credentials": "*",
},
body: await response.body(),
});