}

    SmbFileOutputStream(final SmbFile file, final boolean append, final int openFlags, final int access, final int sharing)
            throws SmbException {
        this.file = file;
        this.append = append;
        this.openFlags = openFlags;
        this.sharing = sharing;
        this.access = access | SmbConstants.FILE_WRITE_DATA;

        try (SmbTreeHandleImpl th = file.ensureTreeConnected()) {

    private final boolean unsharedFile;

    private SmbFileHandleImpl handle;

    private final int sharing;

    /**
     * Instantiate a random access file from URL
     *
     * @param url the SMB URL of the file to access
     * @param mode the access mode ("r" for read-only, "rw" for read-write)
     * @param sharing the sharing flags for file access
     * @param tc the CIFS context to use for the connection

# CORS (Cross-Origin Resource Sharing) { #cors-cross-origin-resource-sharing }

<a href="https://developer.mozilla.org/en-US/docs/Web/HTTP/CORS" class="external-link" target="_blank">CORS or "Cross-Origin Resource Sharing"</a> refers to the situations when a frontend running in a browser has JavaScript code that communicates with a backend, and the backend is in a different "origin" than the frontend.

## Origin { #origin }

    }

    SmbFileInputStream(final SmbFile file, final int openFlags, final int access, final int sharing, final boolean unshared)
            throws SmbException {
        this.file = file;
        this.unsharedFile = unshared;
        this.openFlags = openFlags;
        this.access = access;
        this.sharing = sharing;

        try (SmbTreeHandleInternal th = file.ensureTreeConnected()) {
            this.smb2 = th.isSMB2();

But if you have custom headers that you want a client in a browser to be able to see, you need to add them to your CORS configurations ([CORS (Cross-Origin Resource Sharing)](cors.md){.internal-link target=_blank}) using the parameter `expose_headers` documented in <a href="https://www.starlette.io/middleware/#corsmiddleware" class="external-link" target="_blank">Starlette's CORS docs</a>.

///

    @Test
    @DisplayName("Should format error message for sharing violation")
    void testSharingViolationError() {
        // Given
        int ntStatus = NtStatus.NT_STATUS_SHARING_VIOLATION;

        // When
        SmbException exception = new SmbException(ntStatus, false);

        // Then
        assertTrue(exception.getMessage().toLowerCase().contains("sharing") || exception.getMessage().toLowerCase().contains("violation")

                    this.handle = this.pipe.openUnshared(this.openFlags, this.access, this.sharing, SmbConstants.ATTR_NORMAL, 0);
                } else {
                    // at least on samba, SmbComOpenAndX fails without the pipe prefix
                    this.handle = this.pipe.openUnshared("\\pipe" + getUncPath(), this.openFlags, this.access, this.sharing,
                            SmbConstants.ATTR_NORMAL, 0);
                }

     *            access mode (r|rw)
     * @param sharing
     *            flags indicating for which operations others may concurrently open the file
     * @return random access file, needs to be closed when finished
     * @throws CIFSException if an error occurs accessing the resource
     *
     */
    SmbRandomAccess openRandomAccess(String mode, int sharing) throws CIFSException;

    /**

 */
package org.codelibs.fess.cors;

import jakarta.servlet.ServletRequest;
import jakarta.servlet.ServletResponse;

/**
 * Abstract base class for handling CORS (Cross-Origin Resource Sharing) requests.
 * Provides common CORS header constants and defines the processing interface.
 */
public abstract class CorsHandler {

    /**
     * Creates a new instance of CorsHandler.
     */

import jakarta.servlet.ServletRequest;
import jakarta.servlet.ServletResponse;
import jakarta.servlet.http.HttpServletResponse;

/**
 * Default implementation of CORS (Cross-Origin Resource Sharing) handler.
 * This handler automatically registers itself for origins configured in the system
 * and applies standard CORS headers based on the application configuration.
 */
public class DefaultCorsHandler extends CorsHandler {