Repository Issue Activity (beta)

#305 `OPTIONS` request handler missing `Allow` header

#90 Leaking headers?

#422 Add a note in the docs about `origin: true` and `credentials: true` being dangerous

#408 Security: README regex example allows unintended origin matching

#384 Docs should better explain what this package actually does

#293 Option preflightContinue not working with origin function

#346 Operational issues with CORS

#236 [Question / Feature Request] CORS-RFC1918 Support

#235 include types with package

#330 `Vary: Origin` should be set on non-CORS request

#233 Debug Cors

#333 CORS requests with credentials should forbid `*`

#61 when configured to reflect Access-Control-Request-Headers, should also use Vary: Access-Control-Request-Headers

#317 Add ability to omit `Vary: Origin` header

#365 Incorrect CORS response when origin is set to a String

#295 Incorrect response when option origin is true and requestOrigin is undefined

#383 New CORS playground

#381 Typosquatted `cors-2.8.5` package flagged as malware

#369 Performance optimization opportunities for CORS middleware

#301 DEMO is broken

#294 Array - set origin -Not working

#315 Cors error when connecting through ssh tunnel

#360 Allows CORS for any routes, including OPTIONS: documentation is obsolete

#271 A question about the type of the origin option value.

#343 Cors Demo in Documentation Link broken