dsoumis commented on PR #826: URL: https://github.com/apache/tomcat/pull/826#issuecomment-2657902498
The revised code, though less nested, adheres to the CORS flow as specified. In my opinion, this structure offers a more maintainable and understandable implementation. Also the ordering of the methods appears safe. In isSameOrigin(), any malformed header would not erroneously be classified as same-origin. Thus, will result in the subsequent check with isValidOrigin(). -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org
