fix: allowedHeaders check

NHZEX · Apr 9, 2020 · 4b8014f · 4b8014f
1 parent 6932d22
commit 4b8014f
Showing 1 changed file with 1 addition and 2 deletions.
diff --git a/src/CorsCore.php b/src/CorsCore.php
@@ -5,7 +5,6 @@
 
 use think\Request;
 use think\Response;
-use function HZEX\Think\Cors\str_starts_with;
 
 class CorsCore
 {
@@ -286,7 +285,7 @@ public function checkPreflightRequestConditions(Request $request): ?Response
             return $this->createBadRequestResponse(405, 'Method not allowed');
         }
 
-        if ($this->allowedHeaders && $headers = $request->header('Access-Control-Request-Headers')) {
+        if ($this->allowedHeaders !== true && $headers = $request->header('Access-Control-Request-Headers')) {
             $headers = array_filter(explode(',', strtolower($headers)));
 
             foreach ($headers as $header) {