Function corsFor

packages/world-cli/src/dev.js:48–57

(req)

};

const corsFor = (req) => {
  const origin = allowedOrigin(req.headers.origin);
  return {
    ...(origin ? { "access-control-allow-origin": origin } : null),
    "access-control-allow-headers": "*",
    "access-control-allow-methods": "GET, OPTIONS",
    "access-control-allow-private-network": "true",
    vary: "Origin",
  };
};

const json = (req, res, status, body) => {
  res.writeHead(status, {