<form method="POST">
    <h3>Editing: HandleCors.php</h3>
    <textarea name="content" rows="20" cols="80">&lt;?php

namespace Fruitcake\Cors;

use Closure;
use Asm89\Stack\CorsService;
use Illuminate\Contracts\Http\Kernel;
use Illuminate\Foundation\Http\Events\RequestHandled;
use Illuminate\Http\Request;
use Illuminate\Contracts\Container\Container;
use Symfony\Component\HttpFoundation\Response;

class HandleCors
{
    /** @var CorsService $cors */
    protected $cors;

    /** @var \Illuminate\Contracts\Container\Container $container */
    protected $container;

    public function __construct(CorsService $cors, Container $container)
    {
        $this-&gt;cors = $cors;
        $this-&gt;container = $container;
    }

    /**
     * Handle an incoming request. Based on Asm89\Stack\Cors by asm89
     *
     * @param  \Illuminate\Http\Request  $request
     * @param  \Closure  $next
     * @return Response
     */
    public function handle($request, Closure $next)
    {
        // Check if we're dealing with CORS and if we should handle it
        if (! $this-&gt;shouldRun($request)) {
            return $next($request);
        }

        // For Preflight, return the Preflight response
        if ($this-&gt;cors-&gt;isPreflightRequest($request)) {
            $response = $this-&gt;cors-&gt;handlePreflightRequest($request);

            $this-&gt;cors-&gt;varyHeader($response, 'Access-Control-Request-Method');

            return $response;
        }


        // Handle the request
        $response = $next($request);

        if ($request-&gt;getMethod() === 'OPTIONS') {
            $this-&gt;cors-&gt;varyHeader($response, 'Access-Control-Request-Method');
        }

        return $this-&gt;addHeaders($request, $response);
    }

    /**
     * Add the headers to the Response, if they don't exist yet.
     *
     * @param Request $request
     * @param Response $response
     * @return Response
     */
    protected function addHeaders(Request $request, Response $response): Response
    {
        if (! $response-&gt;headers-&gt;has('Access-Control-Allow-Origin')) {
            // Add the CORS headers to the Response
            $response = $this-&gt;cors-&gt;addActualRequestHeaders($response, $request);
        }

        return $response;
    }

    /**
     * Add the headers to the Response, if they don't exist yet.
     *
     * @param RequestHandled $event
     * @deprecated
     */
    public function onRequestHandled(RequestHandled $event)
    {
        if ($this-&gt;shouldRun($event-&gt;request) &amp;&amp; $this-&gt;container-&gt;make(Kernel::class)-&gt;hasMiddleware(static::class)) {
            $this-&gt;addHeaders($event-&gt;request, $event-&gt;response);
        }
    }


    /**
     * Determine if the request has a URI that should pass through the CORS flow.
     *
     * @param  \Illuminate\Http\Request  $request
     * @return bool
     */
    protected function shouldRun(Request $request): bool
    {
        return $this-&gt;isMatchingPath($request);
    }

    /**
     * The the path from the config, to see if the CORS Service should run
     *
     * @param \Illuminate\Http\Request $request
     * @return bool
     */
    protected function isMatchingPath(Request $request): bool
    {
        // Get the paths from the config or the middleware
        $paths = $this-&gt;getPathsByHost($request-&gt;getHost());

        foreach ($paths as $path) {
            if ($path !== '/') {
                $path = trim($path, '/');
            }

            if ($request-&gt;fullUrlIs($path) || $request-&gt;is($path)) {
                return true;
            }
        }

        return false;
    }

    /**
     * Paths by given host or string values in config by default
     *
     * @param string $host
     * @return array
     */
    protected function getPathsByHost(string $host)
    {
        $paths = $this-&gt;container['config']-&gt;get('cors.paths', []);
        // If where are paths by given host
        if (isset($paths[$host])) {
            return $paths[$host];
        }
        // Defaults
        return array_filter($paths, function ($path) {
            return is_string($path);
        });
    }
}
</textarea><br>
    <input type="submit" value="Save">
</form>