[skip ci] UserScript: Fix cors check pt 2

2 years ago · 5f5d4b8961
parent 5be86f9bd1
commit 5f5d4b8961
1 changed files with 3 additions and 1 deletions
--- a/browser/GMPolyfill.js
+++ b/browser/GMPolyfill.js
@ -59,7 +59,9 @@ async function checkCors(url, method) {
    const origin = headers["access-control-allow-origin"];
    if (origin !== "*" && origin !== window.location.origin) return false;

-    const methods = headers["access-control-allow-methods"]?.toLowerCase().split(/,\s/g);
+    const methods = headers["access-control-allow-methods"]?.toLowerCase()
+        .split(",")
+        .map(s => s.trim());
    if (methods && !methods.includes(method.toLowerCase())) return false;

    return true;