# Returns a valid response when request's |referrer| matches
# |expected_referrer|.
def main(request, response):
    # We want |referrer| to be the referrer header with no query params,
    # because |expected_referrer| will not contain any query params, and
    # thus cannot be compared with the actual referrer header if it were to
    # contain query params. This works fine if the actual referrer has no
    # query params too.
    referrer = request.headers.get("referer", "").split("?")[0]
    referrer_policy = request.GET.first("referrer_policy")
    expected_referrer = request.GET.first("expected_referrer", "")
    response_headers = [("Content-Type", "text/javascript"),
                        ("Access-Control-Allow-Origin", "*")]

    if referrer_policy == "no-referrer" or referrer_policy == "origin":
        if referrer == expected_referrer:
            return (200, response_headers, "")
        return (404, response_headers)

    if referrer_policy == "same-origin":
        if referrer == expected_referrer:
            return (200, response_headers, "")
        return (404, response_headers)
    return (404, response_headers)