Merge pull request #15 from hel-repo/dev

Hel 3.0.2

CHANGES.rst

@@ -2,6 +2,7 @@
 -----
 - Added the PATCH request method to the list of allowed HTTP methods.
 - Added the line of code to actually change the name of a package.
+- Fixed crash when sending preflight CORS request without ``Access-Control-Request-Headers``.
 
 3.0.1
 -----

hel/__init__.py

@@ -68,10 +68,11 @@ def add_cors_to_response(event):
 def cors_options_view(context, request):
     response = request.response
     if 'Access-Control-Request-Headers' in request.headers:
+        response.headers['Access-Control-Allow-Headers'] = (
+            request.headers['Access-Control-Request-Headers'])
+    if 'Access-Control-Request-Method' in request.headers:
         response.headers['Access-Control-Allow-Methods'] = (
             'OPTIONS,HEAD,GET,POST,PUT,DELETE,PATCH')
-    response.headers['Access-Control-Allow-Headers'] = (
-        request.headers['Access-Control-Request-Headers'])
     return response