@@ -295,8 +295,7 @@ def allow_origin(self):
295
295
@property
296
296
def allow_origin_pat (self ):
297
297
"""Regular expression version of allow_origin"""
298
- pat_str = self .settings .get ("allow_origin_pat" , None )
299
- return re .compile (pat_str ) if pat_str else None
298
+ return self .settings .get ("allow_origin_pat" , None )
300
299
301
300
@property
302
301
def allow_credentials (self ):
@@ -310,7 +309,7 @@ def set_default_headers(self):
310
309
self .set_header ("Access-Control-Allow-Origin" , self .allow_origin )
311
310
elif self .allow_origin_pat :
312
311
origin = self .get_origin ()
313
- if origin and self . allow_origin_pat . match (origin ):
312
+ if origin and re . match (self . allow_origin_pat , origin ):
314
313
self .set_header ("Access-Control-Allow-Origin" , origin )
315
314
elif self .token_authenticated and "Access-Control-Allow-Origin" not in self .settings .get (
316
315
"headers" , {}
@@ -383,7 +382,7 @@ def check_origin(self, origin_to_satisfy_tornado=""):
383
382
if self .allow_origin :
384
383
allow = self .allow_origin == origin
385
384
elif self .allow_origin_pat :
386
- allow = bool (self . allow_origin_pat . match (origin ))
385
+ allow = bool (re . match (self . allow_origin_pat , origin ))
387
386
else :
388
387
# No CORS headers deny the request
389
388
allow = False
@@ -428,7 +427,7 @@ def check_referer(self):
428
427
if self .allow_origin :
429
428
allow = self .allow_origin == origin
430
429
elif self .allow_origin_pat :
431
- allow = bool (self . allow_origin_pat . match (origin ))
430
+ allow = bool (re . match (self . allow_origin_pat , origin ))
432
431
else :
433
432
# No CORS settings, deny the request
434
433
allow = False
0 commit comments