1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
|
import os
from wptserve.utils import isomorphic_encode
def main(request, response):
origin = request.GET.first(b'origin')
if origin:
response.headers.set(b'Access-Control-Allow-Origin', origin)
tao = request.GET.first(b'tao')
if tao == b'wildcard':
# wildcard, pass
response.headers.set(b'Timing-Allow-Origin', b'*')
elif tao == b'null':
# null, fail
response.headers.set(b'Timing-Allow-Origin', b'null')
elif tao == b'origin':
# case-sensitive match for origin, pass
response.headers.set(b'Timing-Allow-Origin', origin)
elif tao == b'space':
# space separated list of origin and wildcard, fail
response.headers.set(b'Timing-Allow-Origin', (origin + b' *'))
elif tao == b'multi':
# more than one TAO values, separated by comma, pass
response.headers.set(b'Timing-Allow-Origin', origin)
response.headers.append(b'Timing-Allow-Origin', b'*')
elif tao == b'multi_wildcard':
# multiple wildcards, separated by comma, pass
response.headers.set(b'Timing-Allow-Origin', b'*')
response.headers.append(b'Timing-Allow-Origin', b'*')
elif tao == b'match_origin':
# contains a match of origin, separated by comma, pass
response.headers.set(b'Timing-Allow-Origin', origin)
response.headers.append(b'Timing-Allow-Origin', b"fake")
elif tao == b'match_wildcard':
# contains a wildcard, separated by comma, pass
response.headers.set(b'Timing-Allow-Origin', b"fake")
response.headers.append(b'Timing-Allow-Origin', b'*')
elif tao == b'uppercase':
# non-case-sensitive match for origin, fail
response.headers.set(b'Timing-Allow-Origin', origin.upper())
else:
pass
response.headers.set(b"Cache-Control", b"no-cache, must-revalidate");
image_path = os.path.join(os.path.dirname(isomorphic_encode(__file__)), b"square100.png");
response.content = open(image_path, mode=u'rb').read();
|