middleware/cors.js

@@ -13,13 +13,9 @@ export function createCors() {
     if (opts.enabled) {
       let origin = req.headers['origin'] || req.headers['referer'] || ''
       let headers = req.headers['access-control-request-headers']
-
-      if (!origin) {
-        return next()
-      }
       let { hostname, host, protocol } = parse(origin)
 
-      if (opts.origin.length) {
+      if (opts.origin.length && hostname) {
         let pass = false
         for (let it of opts.origin) {
           if (hostname.endsWith(it)) {