third_party/WebKit/LayoutTests/http/tests/security/resources/cors-script.php

<?php
$cors_arg = strtolower($_GET['cors']);
if ($cors_arg != 'false') {
  if ($cors_arg == '' || $cors_arg == 'true') {
    header('Access-Control-Allow-Origin: http://127.0.0.1:8000');
  } else {
    header('Access-Control-Allow-Origin: ' . $cors_arg);
  }
}

if (strtolower($_GET['credentials']) == 'true') {
  header('Access-Control-Allow-Credentials: true');
}

$custom_header_arg = strtolower($_GET['custom']);
if (!(empty($custom_header_arg))) {
  header('Access-Control-Allow-Headers: ' . $custom_header_arg);
}

$suborigin_arg = strtolower($_GET['suborigin']);
if (!(empty($suborigin_arg))) {
  header('Access-Control-Allow-Suborigin: ' . $suborigin_arg);
}

if ($_SERVER['HTTP_SUBORIGIN'] == 'foobar') {
  header('Access-Control-Allow-Suborigin: foobar');
}

header('Content-Type: application/javascript');

$delay = $_GET['delay'];
if ($delay)
  usleep(1000 * $delay);

if ($_SERVER['HTTP_ORIGIN'] && $_GET['value_cors']) {
  $value = $_GET['value_cors'];
} else {
  $value = $_GET['value'];
}

$cookie = $_GET['cookie'];

if ($value || $cookie) {
  if ($cookie) {
    $value = $_COOKIE[$cookie];
  }

  $result_var = 'result';
  if (!empty($_GET['resultvar'])) {
    $result_var = $_GET['resultvar'];
  }

  echo $result_var . " = \"" . $value . "\";";
} else if (strtolower($_GET['fail']) == 'true') {
  echo "throw({toString: function(){ return 'SomeError' }});";
} else {
  echo "alert('script ran.');";
}
?>