fix(cors): fix acao header

unjs · Aug 26, 2024 · eddcc5c · eddcc5c
1 parent 3504748
commit eddcc5c
Showing 1 changed file with 8 additions and 6 deletions.
diff --git a/src/utils/internal/cors.ts b/src/utils/internal/cors.ts
@@ -79,17 +79,19 @@ export function createOriginHeaders(
   const { origin: originOption } = options;
   const origin = event.request.headers.get("origin");
 
-  if (!origin || !originOption || originOption === "*") {
+  if (!originOption || originOption === "*") {
     return { "access-control-allow-origin": "*" };
   }
 
-  if (typeof originOption === "string") {
-    return { "access-control-allow-origin": originOption, vary: "origin" };
+  if (originOption === "null") {
+    return { "access-control-allow-origin": "null", vary: "origin" };
   }
 
-  return isCorsOriginAllowed(origin, options)
-    ? { "access-control-allow-origin": origin, vary: "origin" }
-    : {};
+  if (origin && isCorsOriginAllowed(origin, options)) {
+    return { "access-control-allow-origin": origin, vary: "origin" };
+  }
+
+  return {};
 }
 
 /**