🔀 Merge pull request #2 from bluesn4rfer/dev

Added check for HTTP_ORIGIN index (fix #1)
leafsphp · Jul 25, 2022 · 10934a7 · 10934a7
2 parents 5a0c77b + 03c6bd7
commit 10934a7
Showing 1 changed file with 3 additions and 3 deletions.
diff --git a/src/Cors.php b/src/Cors.php
@@ -68,7 +68,7 @@ protected static function configureOrigin()
 		if (static::isOriginAllowed($origin)) {
 			Headers::accessControl(
 				'Allow-Origin',
-				$_SERVER['HTTP_ORIGIN']
+				$_SERVER['HTTP_ORIGIN'] ?? $_SERVER['HTTP_HOST']
 			);
 		}
 
@@ -126,8 +126,8 @@ protected static function configureCredentials()
 
 	protected static function isOriginAllowed($allowedOrigin)
 	{
-		$origin = $_SERVER['HTTP_ORIGIN'];
-
+		$origin = $_SERVER['HTTP_ORIGIN'] ?? $_SERVER['HTTP_HOST'];
+		
 		if (is_array($allowedOrigin)) {
 			for ($i = 0; $i < count($allowedOrigin); $i++) {
 				if (static::isOriginAllowed($allowedOrigin[$i])) {