CORS allow enerything via custom function

[kzhsw]

You'll need Include request headers in custom function (在自定义函数中包含请求头) to use this.

// 移除现有的 CORS 头
for (let i = val.length - 1; i >= 0; i--) {
    let headerName = val[i].name.toLowerCase();
    if (headerName === 'access-control-allow-origin' ||
        headerName === 'access-control-allow-methods' ||
        headerName === 'access-control-allow-headers' ||
        headerName === 'access-control-allow-credentials') {
        val.splice(i, 1);
    }
}


// 获取 Origin 和 Access-Control-Request-Headers
let origin = "";
let requestHeaders = "";
for (const header of detail.requestHeaders) {
    if (header.name.toLowerCase() === 'origin') {
        origin = header.value;
    }
    if (header.name.toLowerCase() === 'access-control-request-headers') {
        requestHeaders = header.value;
    }
}


// 添加新的 CORS 头
val.push({ name: "Access-Control-Allow-Origin", value: origin });
val.push({ name: "Access-Control-Allow-Methods", value: "GET, POST, PUT, DELETE, OPTIONS" });
val.push({ name: "Access-Control-Allow-Headers", value: requestHeaders });
val.push({ name: "Access-Control-Allow-Credentials", value: "true" });
val.push({ name: "Vary", value: "Origin, Access-Control-Request-Headers" });
return val;