in source/checksum/lib/api/index.js [113:125]
getCORS() {
const {
Origin = null, origin = null, 'X-Forwarded-For': XFF = '*',
} = this.requestHeaders || {};
return {
'Content-Type': 'application/json',
'Access-Control-Allow-Methods': ALLOWED_METHODS.join(', '),
'Access-Control-Allow-Headers': ALLOWED_HEADERS.join(', '),
'Access-Control-Allow-Origin': this.allowOrigins || Origin || origin || XFF,
// 'Access-Control-Allow-Credentials': 'true',
};
}