Issue 1562 - Improve detecting of XmlHttmlRequest requests

src/plugin/PluginWbPassThrough.cpp

 #include "PluginStdAfx.h"
 
 #include "PluginWbPassThrough.h"
 #include "PluginClient.h"
 #include "PluginClientFactory.h"
 #include "PluginFilter.h"
 #include "PluginSettings.h"
 #include "PluginClass.h"
 #include "PluginSystem.h"
 #include <WinInet.h>
@@ skipping 49 matching lines @@
     if (FAILED(hr))
     {
       return "";
     }
     return ExtractHttpHeader<std::string>(buf, "Accept:", "\r\n");
   }
 
   bool IsXmlHttpRequest(const std::wstring& additionalHeaders)
   {
     auto requestedWithHeader = ExtractHttpHeader<std::wstring>(additionalHeaders, L"X-Requested-With:", L"\n");
-    return TrimString(requestedWithHeader) == L"XMLHttpRequest";
+    if(TrimString(requestedWithHeader) == L"XMLHttpRequest")
+    {
+      return true;
+    }
+    // CORS
+    auto originHeader = ExtractHttpHeader<std::wstring>(additionalHeaders, L"Origin:", L"\n");
+    return !TrimString(originHeader).empty();
   }
 }
 
 WBPassthruSink::WBPassthruSink()
   : m_currentPositionOfSentPage(0)
   , m_contentType(CFilter::EContentType::contentTypeAny)
   , m_blockedInTransaction(false)
 {
 }
 
@@ skipping 313 matching lines @@
 
 STDMETHODIMP WBPassthru::LockRequest(/* [in] */ DWORD options)
 {
   return BaseClass::LockRequest(options);
 }
 
 STDMETHODIMP WBPassthru::UnlockRequest()
 {
   return BaseClass::UnlockRequest();
 }