mirror of
https://github.com/v2board/v2board.git
synced 2024-11-10 17:49:11 +08:00
27 lines
874 B
PHP
27 lines
874 B
PHP
|
<?php
|
||
|
|
|
||
|
|
namespace App\Http\Middleware;
|
||
|
|
|
||
|
|
use Closure;
|
||
|
|
|
||
|
|
class CORS
|
||
|
|
{
|
||
|
|
public function handle($request, Closure $next)
|
||
|
|
{
|
||
|
|
$origin = $request->header('origin');
|
||
|
|
if(empty($origin)){
|
||
|
|
$referer = $request->header('referer');
|
||
|
|
if(!empty($referer)&&preg_match("/^((https|http):\/\/)?([^\/]+)/i", $referer, $matches)){
|
||
|
|
$origin = $matches[0];
|
||
|
|
}
|
||
|
|
}
|
||
|
|
$response = $next($request);
|
||
|
|
$response->header('Access-Control-Allow-Origin', trim($origin, '/'));
|
||
|
|
$response->header('Access-Control-Allow-Methods', 'GET,POST,OPTIONS');
|
||
|
|
$response->header('Access-Control-Allow-Headers', 'Content-Type,X-Requested-With');
|
||
|
|
$response->header('Access-Control-Allow-Credentials', 'true');
|
||
|
|
$response->header('Access-Control-Max-Age', 10080);
|
||
|
|
|
||
|
|
return $response;
|
||
|
|
}
|
||
|
|
}
|