| def main(request, response): | |
| response.headers.set(b'Cache-Control', b'no-store') | |
| response.headers.set(b'Access-Control-Allow-Origin', | |
| request.headers.get(b'origin')) | |
| headers = b'x-custom-s,x-custom-test,x-custom-u,x-custom-ua,x-custom-v' | |
| if request.method == u'OPTIONS': | |
| response.headers.set(b'Access-Control-Max-Age', b'0') | |
| response.headers.set(b'Access-Control-Allow-Headers', headers) | |
| # Access-Control-Request-Headers should be sorted. | |
| if headers != request.headers.get(b'Access-Control-Request-Headers'): | |
| response.status = 400 | |
| else: | |
| if request.headers.get(b'x-custom-s'): | |
| response.content = b'PASS' | |
| else: | |
| response.status = 400 | |
| response.content = b'FAIL' |