summaryrefslogtreecommitdiffstats
path: root/testing/web-platform/tests/xhr/resources/access-control-basic-options-not-supported.py
blob: bb3f63e311f64455a789f2a316e28a82aa5257b5 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
def main(request, response):
    response.headers.set(b"Cache-Control", b"no-store")

    # Allow simple requests, but deny preflight
    if request.method != u"OPTIONS":
        if b"origin" in request.headers:
            response.headers.set(b"Access-Control-Allow-Credentials", b"true")
            response.headers.set(b"Access-Control-Allow-Origin", request.headers[b"origin"])
        else:
            response.status = 500
    else:
        response.status = 400