badges / shields / 10139805009 / 1

96%

master: 96%

push

github

send Cross-Origin-Resource-Policy header on all responses (#10420)

* send Cross-Origin-Resource-Policy header on all responses

* don't re-add Access-Control-Allow-Origin on json responses

this is re-adding a header we've already set earlier in the process

* update tests

6280 of 6525 branches covered (96.25%)

47201 of 48951 relevant lines covered (96.42%)

119.38 hits per line