在 Yii2 中，当服务端异常时，未响应 500，而是在浏览器中提示：CORS 错误

Access to XMLHttpRequest at 'https://api.apply.local/convention-free-field/get-search-condition-fields-by-convention-id' from origin 'https://console.apply.local' has been blocked by CORS policy: The 'Access-Control-Allow-Origin' header contains multiple values 'https://console.apply.local, *', but only one is allowed.

public static function setAllowOrigin()
{
	$httpOrigin = $_SERVER['HTTP_ORIGIN'] ?? '';
	Yii::debug('OPTION CHECK: ' . $httpOrigin);
	if (
		in_array($httpOrigin, [
		//
		'http://console.apply.local',
		'https://console.apply.local',
		'http://tougao.apply.local',
		'https://tougao.apply.local',
		'http://apply.local',
		'https://apply.local',
		'http://official.local',
		'http://localhost:8080',
		'http://localhost:8081',
		'http://localhost:8082',
		'http://localhost:8083',
		'http://localhost:8084',
		//正式域名
		])
	) {
		\Yii::$app->response->headers->add('Access-Control-Allow-Origin', $httpOrigin);
		\Yii::$app->response->headers->add('Access-Control-Allow-Headers', '*');
	}
}

self::setAllowOrigin();

    public static function setAllowOrigin()
    {
//        $httpOrigin = $_SERVER['HTTP_ORIGIN'] ?? '';
//        Yii::debug('OPTION CHECK: ' . $httpOrigin);
//        if (
//            in_array($httpOrigin, [
//            //
//            'http://console.apply.local',
//            'https://console.apply.local',
//            'http://tougao.apply.local',
//            'https://tougao.apply.local',
//            'http://apply.local',
//            'https://apply.local',
//            'http://official.local',
//            'http://localhost:8080',
//            'http://localhost:8081',
//            'http://localhost:8082',
//            'http://localhost:8083',
//            'http://localhost:8084',
//            //正式域名
//            ])
//        ) {
//            \Yii::$app->response->headers->add('Access-Control-Allow-Origin', $httpOrigin);
//            \Yii::$app->response->headers->add('Access-Control-Allow-Headers', '*');
//        }
    }

self::setAllowOrigin();

    public function behaviors()
    {
        $behaviors = parent::behaviors();

        $behaviors['corsFilter'] = [
            'class' => Cors::class,
            'cors' => [
                'Origin' => [
                    //
                    'http://console.apply.local',
                    'https://console.apply.local',
                    'http://tougao.apply.local',
                    'https://tougao.apply.local',
                    'http://apply.local',
                    'https://apply.local',
                    'http://official.local',
                    'http://localhost:8080',
                    'http://localhost:8081',
                    'http://localhost:8082',
                    'http://localhost:8083',
                    'http://localhost:8084',
                    //正式域名
                ],
                'Access-Control-Allow-Headers' => ['*'],
            ],
        ];
        return $behaviors;
    }

Access to XMLHttpRequest at 'https://api.apply.local/convention-free-field/get-search-condition-fields-by-convention-id' from origin 'https://console.apply.local' has been blocked by CORS policy: Response to preflight request doesn't pass access control check: No 'Access-Control-Allow-Origin' header is present on the requested resource.