go-chi / cors

CORS net/http middleware for Go

go-chi/cors Issues

AllowOriginFunc considered harmful (may lead to Web cache poisoning)
Updated 3 months ago1
Allowing methods that are not uppercase should be possible but isn't
Updated 5 months ago1
allow all origins wildcard not supported by chrome
Updated 5 months ago3
Listing Origin as an allowed request header is unnecessary
Updated 5 months ago
Document differences between upstream github.com/rs/cors and this fork
Updated a year ago3
Custom header with undercore is been normilize to a header without it
Closed 2 years ago4
Handler: Actual request If no Origin present allows the call to complete without validating the origin.
Closed 4 years ago2
Preflight OPTIONS request should respond with StatusNoContent(204) and not StatusOK(200)
Closed 4 years ago2
IE11 Internet Explorer 11 does not add the Origin header on a CORS request across sites of a trusted zone.
Closed 5 years ago1
CORS isn't work
Closed 5 years ago1
License
Closed 6 years ago12