public function testCors()
{
$this->app->post("/", function () {
return new Response("hello from controller");
});
$req = Request::create("/", "POST");
$req->headers->set("Origin", "notlocalhost");
$req->headers->set("Access-Control-Request-Method", "post");
$app = $this->app->builder->resolve($this->app);
$response = $app->handle($req);
$this->assertEquals(403, $response->getStatusCode());
}
