IIS CORS多个域

Question

如何为Access-Control-Allow-Origin启用多个域名？我有一个应用程序(ASP )绑定到example.com和www.example.com

下一个代码无效。

<httpProtocol>
  <customHeaders>
    <add name="Access-Control-Allow-Origin" value="http://example.com,http://www.example.com" />
    <add name="Access-Control-Allow-Methods" value="*" />
    <add name="Access-Control-Allow-Credentials" value="true" />
  </customHeaders>

Valid或http://example.com或http://example.com

我两样都需要

Answer 1

private void GlobalBeginRequest(object sender, EventArgs e)
{
    var Origins = "domain1.com,domain2.com,domain3.com:8081";
    if ((Request.Headers["Origin"] != null) && (Origins.Split(',').FirstOrDefault(x => Request.Headers["Origin"].Contains(x)) != null))
    {
        Response.Headers.Add("Access-Control-Allow-Origin", String.Format("{0}", Request.Headers["Origin"]));
    }
}