+
+ // Verify POST still functions with 'Origin' header set to site's domain.
+ $origin = \Drupal::request()->getSchemeAndHttpHost();
+
+ /** @var \GuzzleHttp\ClientInterface $httpClient */
+ $httpClient = $this->getSession()->getDriver()->getClient()->getClient();
+ $url = Url::fromUri('base:/test-page');
+ $response = $httpClient->request('POST', $url->setAbsolute()->toString(), [
+ 'headers' => [
+ 'Origin' => $origin,
+ ],
+ ]);
+ $this->assertEquals(200, $response->getStatusCode());