mirror of
https://github.com/RYDE-WORK/CORStest.git
synced 2026-01-19 13:13:33 +08:00
Minor fix to prevent false positives
This commit is contained in:
parent
8b99cca1e4
commit
b203683955
@ -81,7 +81,7 @@ def cors(url, origin, ssltest=False, firstrun=False):
|
||||
if acac and acao != '*' and not args.q: alert(url, "Access-Control-Allow-Credentials present")
|
||||
if vary and not args.q: warning(url, "Access-Control-Allow-Origin dynamically generated")
|
||||
if ssltest and response.info().getheader('Strict-Transport-Security'): acao = ""
|
||||
return acao or ""
|
||||
return (acao or "") if acac else ""
|
||||
except Exception as e:
|
||||
if not args.q: error(url, e.message or str(e).splitlines()[-1])
|
||||
if not firstrun: return ""
|
||||
|
||||
Loading…
x
Reference in New Issue
Block a user