Search results

Access-Control-Allow-Origin set to '*' even when 'Origin' is supplied

bug

Status: Open.

#94 In koajs/cors;

· 75lb opened on Jan 8, 2024

The default CORS configuration poses a security risk.

bug

Status: Open.

#93 In koajs/cors;

· ConardLi opened on Dec 18, 2023

Allow not returning any access control headers if the Origin is not allowed to access the resource

enhancement

Status: Open.

#90 In koajs/cors;

· mjarosie opened on Apr 21, 2023

Should default options allow null origin?

Status: Open.

#89 In koajs/cors;

· CopyJosh opened on Nov 6, 2022

https://github.com/koajs/cors/blob/master/index.js#L138

Status: Open.

#79 In koajs/cors;

· ru4ert opened on Oct 17, 2021

How to resolve socket cors

Status: Open.

#76 In koajs/cors;

· yangxyo opened on Apr 15, 2021

How to set multiple domains ?

Status: Open.

#75 In koajs/cors;

· vdegenne opened on Dec 16, 2020

Integrate with @types/koa__cors

Status: Open.

#73 In koajs/cors;

· 5d-jh opened on Nov 9, 2020

Does this still maintains ?

Status: Open.

#72 In koajs/cors;

· spmsupun opened on Aug 14, 2020

documentation missing: needs to be used before router

Status: Open.

#70 In koajs/cors;

· Ossip opened on May 28, 2020

should preflight request return 204 instead of 404 when origin not match?

Status: Open.

#65 In koajs/cors;

· atian25 opened on Oct 11, 2019

How to set CORS of static resources

Status: Open.

#64 In koajs/cors;

· quzhichao opened on Sep 26, 2019