badges / shields / 10193786106 / 1

96%

master: 96%

push

github

send Cross-Origin-Resource-Policy header on all responses (#10420)

* send Cross-Origin-Resource-Policy header on all responses

* don't re-add Access-Control-Allow-Origin on json responses

this is re-adding a header we've already set earlier in the process

* update tests

6284 of 6529 branches covered (96.25%)

47214 of 48951 relevant lines covered (96.45%)

120.27 hits per line