bugfix: 修复跨域问题。

Author: wangliang181230

packages/mitmproxy/src/lib/interceptor/impl/req/OPTIONS.js

@@ -19,7 +19,7 @@ module.exports = {
     const { rOptions, log } = context
 
     // 不是 OPTIONS 请求，或请求头中不含 origin 时，跳过当前拦截器
-    if (rOptions.method !== 'OPTIONS' || rOptions.headers.origin == null) {
+    if (rOptions.method !== 'OPTIONS' || !rOptions.headers.origin) {
       return
     }
 

packages/mitmproxy/src/lib/interceptor/impl/req/baiduOcr.js

@@ -118,7 +118,11 @@ module.exports = {
 
     const headers = {
       'Content-Type': 'application/json; charset=utf-8',
-      'Access-Control-Allow-Origin': '*',
+    }
+
+    if (rOptions.headers.origin) {
+      headers['Access-Control-Allow-Credentials'] = 'true'
+      headers['Access-Control-Allow-Origin'] = rOptions.headers.origin
     }
 
     // 获取配置（api 由 getConfig 以局部变量形式返回，不写入共享配置对象，并发安全）

packages/mitmproxy/src/lib/interceptor/impl/res/AfterOPTIONSHeaders.js

@@ -7,13 +7,13 @@ module.exports = {
   responseIntercept (context, interceptOpt, req, res, proxyReq, proxyRes, ssl, next) {
     const { rOptions, log } = context
 
-    if (rOptions.method === 'OPTIONS') {
+    if (rOptions.method === 'OPTIONS' || !rOptions.headers.origin) {
       return
     }
 
     const headers = {
       'Access-Control-Allow-Credentials': 'true',
-      'Access-Control-Allow-Origin': '*',
+      'Access-Control-Allow-Origin': rOptions.headers.origin,
       'Cross-Origin-Resource-Policy': interceptOpt.optionsCrossPolicy || 'cross-origin',
     }
 

packages/mitmproxy/src/lib/proxy/mitmproxy/createRequestHandler.js

@@ -334,7 +334,16 @@ module.exports = function createRequestHandler (createIntercepts, middlewares, e
       if (!res.writableEnded) {
         try {
           const status = e.status || 500
-          res.writeHead(status, { 'Content-Type': 'text/html;charset=UTF8' })
+
+          const headers = { 'Content-Type': 'text/html;charset=UTF8' }
+
+          // headers.Access-Control-Allow-*：避免跨域问题
+          if (rOptions.headers.origin) {
+            headers['Access-Control-Allow-Credentials'] = 'true'
+            headers['Access-Control-Allow-Origin'] = rOptions.headers.origin
+          }
+
+          res.writeHead(status, headers)
           res.write(`<style>
             p {
               margin: 10px 0;