From e0e0e5732160c4f215c62ae1d11fb99eacc8edb3 Mon Sep 17 00:00:00 2001
From: yekingyan <529616@gmail.com>
Date: Sun, 12 Apr 2020 15:52:52 +0800
Subject: [PATCH] Add support for use '*' to allow CORS for all domains

---
 plugin/web.py | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/plugin/web.py b/plugin/web.py
index 5431742..b8bd217 100644
--- a/plugin/web.py
+++ b/plugin/web.py
@@ -162,11 +162,12 @@ class WebServer:
             webCorsOriginList.append(webCorsOrigin)
 
         corsOrigin = 'http://localhost'
-        if len(webCorsOriginList) == 1:
+        allowAllCors = '*' in webCorsOriginList  # allow CORS for all domains
+        if len(webCorsOriginList) == 1 and not allowAllCors:
             corsOrigin = webCorsOriginList[0]
         elif b'origin' in req.headers:
             originStr = req.headers[b'origin'].decode()
-            if originStr in webCorsOriginList:
+            if originStr in webCorsOriginList or allowAllCors:
                 corsOrigin = originStr
 
         headers = [