constness

src/middleware/cors.js

@@ -2,7 +2,7 @@
 
 'use strict';
 
-var url = require('url');
+const url = require('url');
 
 /*
  * CORS middleware
@@ -11,19 +11,19 @@ var url = require('url');
  */
 module.exports = function cors(options) {
     options = options || { };
-    var maxAge = options.maxAge || 60 * 60 * 25 * 5; // 5 days
-    var origins = options.origins || [ '*' ];
-    var allowCredentials = options.allowCredentials || false; // cookies
+    const maxAge = options.maxAge || 60 * 60 * 25 * 5; // 5 days
+    const origins = options.origins || [ '*' ];
+    const allowCredentials = options.allowCredentials || false; // cookies
 
     return function (req, res, next) {
-        var requestOrigin = req.headers.origin;
+        let requestOrigin = req.headers.origin;
         if (!requestOrigin) return next();
 
         requestOrigin = url.parse(requestOrigin);
         if (!requestOrigin.host) return res.status(405).send('CORS not allowed from this domain');
 
-        var hostname = requestOrigin.host.split(':')[0]; // remove any port
-        var originAllowed = origins.some(function (o) { return o === '*' || o === hostname; });
+        const hostname = requestOrigin.host.split(':')[0]; // remove any port
+        const originAllowed = origins.some(function (o) { return o === '*' || o === hostname; });
         if (!originAllowed) {
             return res.status(405).send('CORS not allowed from this domain');
         }