misconfigCors.js

module.exports = async function misconfiguredCORS(url, test) {
    let headers = null;
    try {
        const result = await request
            .get(url)
            .set('Access-Control-Allow-Origin', test)
            .timeout(5000)

        if('access-control-allow-origin' in result.headers) {
            headers = {
                page: url,
                data: result.headers
            }
        }
    } catch (e) {
        return null;
    }
    return headers;
}