1 files changed, 12 insertions, 0 deletions
diff --git a/test/wpt/tests/xhr/resources/access-control-preflight-request-headers-origin.py b/test/wpt/tests/xhr/resources/access-control-preflight-request-headers-origin.py
new file mode 100644
index 0000000..b8fb220
--- /dev/null
+++ b/test/wpt/tests/xhr/resources/access-control-preflight-request-headers-origin.py
@@ -0,0 +1,12 @@
+def main(request, response):
+    response.headers.set(b"Cache-Control", b"no-store")
+    response.headers.set(b"Access-Control-Allow-Origin", b"*")
+
+    if request.method == u"OPTIONS":
+        if b"origin" in request.headers.get(b"Access-Control-Request-Headers").lower():
+            response.status = 400
+            response.content = b"Error: 'origin' included in Access-Control-Request-Headers"
+        else:
+            response.headers.set(b"Access-Control-Allow-Headers", b"x-pass")
+    else:
+        response.content = request.headers.get(b"x-pass")