added custom CORS header field, fixed #4

gdut-library · Sep 30, 2013 · 5940ef1 · 5940ef1
1 parent c0a2cac
commit 5940ef1
Showing 1 changed file with 4 additions and 2 deletions.
diff --git a/server/utils.py b/server/utils.py
@@ -2,7 +2,7 @@
 
 from functools import wraps
 
-from flask import make_response
+from flask import make_response, request
 from flask import jsonify as _jsonify
 
 from server.db import db
@@ -28,7 +28,9 @@ def allow_CORS(*args, **kwargs):
  if isinstance(rv, str) or isinstance(rv, unicode):
  rv = make_response(rv)
 
- rv.headers.add('Access-Control-Allow-Origin', '*')
+ origin = request.headers.get('Origin', None)
+ if origin:
+ rv.headers.add('Access-Control-Allow-Origin', origin)
  return rv, status, headers
  return allow_CORS