apigeelint/test/fixtures/resources/PO032/fail/AllowOrigin-request-header-origin.xml

Node module and tool to lint a bundle for an Apigee API Proxy or sharedflow.

<CORS name="AllowOrigin-request-header-origin" >
  <!-- request.header.origin defeats the purpose -->
  <AllowOrigins>{request.header.origin}</AllowOrigins>
  <AllowMethods>GET, POST, PUT, DELETE</AllowMethods>
  <AllowHeaders>origin, x-requested-with, content-type</AllowHeaders>
  <ExposeHeaders>via, x-request-id</ExposeHeaders>
  <MaxAge>180</MaxAge>
  <AllowCredentials>true</AllowCredentials>
  <GeneratePreflightResponse>true</GeneratePreflightResponse>
  <IgnoreUnresolvedVariables>true</IgnoreUnresolvedVariables>
</CORS>