diarmuidbourke

def cors_tween_factory(handler, registry):
    def handle_cors(request):
        if request.method == "OPTIONS":
            allowed_hosts = ['http://127.0.0.1:8000']
            cors_headers = [
                ('Access-Control-Allow-Credentials', "true"),
                ('Access-Control-Allow-Origin', request.headers['origin']),
                ('Access-Control-Allow-Methods', 'GET,PUT,POST,DELETE,OPTIONS'),
                ('Access-Control-Allow-Headers', 
                    """X-CSRF-Token, X-Requested-With, Accept, """ +