Skip to content

Commit 073cc87

Browse files
authored
Use isCorsRequest method (#93)
1 parent c7feb52 commit 073cc87

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

src/CorsService.php

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -145,8 +145,8 @@ private function configureAllowedOrigin(Response $response, Request $request)
145145
// Single origins can be safely set
146146
$response->headers->set('Access-Control-Allow-Origin', array_values($this->options['allowedOrigins'])[0]);
147147
} else {
148-
// For dynamic headers, check the origin first
149-
if ($request->headers->has('Origin') && $this->isOriginAllowed($request)) {
148+
// For dynamic headers, set the requested Origin header when set and allowed
149+
if ($this->isCorsRequest($request) && $this->isOriginAllowed($request)) {
150150
$response->headers->set('Access-Control-Allow-Origin', $request->headers->get('Origin'));
151151
}
152152

0 commit comments

Comments
 (0)