Merge remote-tracking branch 'origin/master'

public/index.php

@@ -6,12 +6,17 @@
  * @package  Laravel
  * @author   Taylor Otwell <taylor@laravel.com>
  */
-header('Access-Control-Allow-Origin: https://rcmap.jucai.gov.cn');
-header("Access-Control-Allow-Methods:GET, POST, OPTIONS, DELETE");
-header("Access-Control-Allow-Headers:*");
-header('Strict-Transport-Security:max-age=180');
-header('X-Download-Options: noopen');
-header('X-Permitted-Cross-Domain-Policies: none');
+$originarr = ['https://rcmap.jucai.gov.cn','https://rencai.jiangzi.xin'];
+$origin = isset($_SERVER['HTTP_ORIGIN']) ? $_SERVER['HTTP_ORIGIN'] : '';
+if (in_array($origin,$originarr)) {
+    header('Access-Control-Allow-Origin: '.$origin);
+    header("Access-Control-Allow-Methods:GET, POST, OPTIONS, DELETE");
+    header("Access-Control-Allow-Headers:*");
+    header('Strict-Transport-Security:max-age=180');
+    header('X-Download-Options: noopen');
+    header('X-Permitted-Cross-Domain-Policies: none');
+}
+
 define('LARAVEL_START', microtime(true));
 
 /*