github.com/koajs/cors issues | Ecosyste.ms: OpenCollective

Access-Control-Allow-Origin set to '*' even when 'Origin' is supplied

75lb opened this issue about 1 year ago

The default CORS configuration poses a security risk.

ConardLi opened this issue about 1 year ago

Overly permissive origin policy

ankitdn opened this issue about 1 year ago

docs: Update README.md to better explain the default for the origin parameter

julienw opened this pull request about 1 year ago

Allow not returning any access control headers if the Origin is not allowed to access the resource

mjarosie opened this issue almost 2 years ago

Should default options allow null origin?

CopyJosh opened this issue about 2 years ago

refactor: [BREAKING] drop node 8, 10, 12 support

fengmk2 opened this pull request over 2 years ago

Calling all options even if origin header is not present. Fix #18 - Not setting headers on Koa2 / Node 6.2

CleberRossi opened this pull request over 2 years ago

🤖 TEST: Run test on Node.js 18

fengmk2 opened this pull request over 2 years ago

Fix: bug between credentials and origin

TyrealHu opened this pull request over 2 years ago

[Proposal] fix: use friendlier promise checking

swain opened this pull request over 2 years ago

Add support for privateNetworkAccess, which add 'Access-Control-Allow-Private-Network' response header

cma-skedulo opened this pull request almost 3 years ago

add-secure-context-headers (Support SharedArrayBuffer)

ltomes opened this pull request almost 3 years ago

Access-Control-Request-Private-Network

75lb opened this issue almost 3 years ago

fix: credentials jsdoc

j-waaang opened this pull request about 3 years ago

https://github.com/koajs/cors/blob/master/index.js#L138

ru4ert opened this issue over 3 years ago

Update 07/2021

3imed-jaberi opened this pull request over 3 years ago

Update redme.md

ijhar8 opened this pull request over 3 years ago

How to resolve socket cors

yangxyo opened this issue almost 4 years ago

How to set multiple domains ?

vdegenne opened this issue about 4 years ago

Add typing file

5d-jh opened this pull request about 4 years ago

Integrate with @types/koa__cors

5d-jh opened this issue about 4 years ago

Does this still maintains ?

spmsupun opened this issue over 4 years ago

allowHeaders doesn't support functions？

slip-box opened this issue over 4 years ago

documentation missing: needs to be used before router

Ossip opened this issue over 4 years ago

Add support for using a function to determine whether or not to allow credentials.

mcohen75 opened this pull request about 5 years ago

Include async functions in origins promise detection

oshoemaker opened this pull request about 5 years ago

UPT: ES6 Object spread

AlphaWong opened this pull request over 5 years ago

should preflight request return 204 instead of 404 when origin not match?

atian25 opened this issue over 5 years ago

How to set CORS of static resources

quzhichao opened this issue over 5 years ago

Fix/non preflight options

sripberger opened this pull request over 5 years ago

Header not set on error response

cyclecycle opened this issue over 5 years ago

docs: update package version

robertoachar opened this pull request almost 6 years ago

Docs: Installation modify

samtsai15 opened this issue almost 6 years ago

refactor: use async function, support options.origin return promise

dead-horse opened this pull request almost 6 years ago

GMT koa deprecated Support for generators will be removed in v3. See the documentation for examples of how to convert old middleware https://github.com/koajs/koa/blob/master/docs/migration.md at server\index.js:6:5

yoonasy opened this issue about 6 years ago

[#56]: Fix security vulnerabilities from npm audit

doug-wade opened this pull request about 6 years ago

npm audit reveals security vulnerabilities

doug-wade opened this issue about 6 years ago

Set `Vary: Origin` header on error responses

erikfried opened this pull request about 6 years ago

Bump npm latest version to 2

crobinson42 opened this issue over 6 years ago

Add KoaJs Slack Community badge

crobinson42 opened this pull request over 6 years ago

How to return dynamic origin?

bestvow opened this issue over 6 years ago

travis: test node@10

fengmk2 opened this pull request over 6 years ago

Is KoaJS team still there to maintain the project?

rap2hpoutre opened this issue over 6 years ago

please bump version

alsotang opened this issue over 6 years ago

i can't install it

zzzgit opened this issue almost 7 years ago

Vary: Origin header breaks CDN

ztrange opened this issue almost 7 years ago

error: uncaughtException: Cannot find module '@koa/cors'

nitrocode opened this issue about 7 years ago

Origin may be a promise

rapzo opened this issue about 7 years ago

Proposing `options.origin` as a Promise.

rapzo opened this pull request about 7 years ago

Proposing `options.origin` as an async function.

rapzo opened this pull request about 7 years ago

Fix tests bench hanging connections.

rapzo opened this pull request about 7 years ago

why set status of `options` for Preflight Request 204

NoraGithub opened this issue over 7 years ago

should CORS be abandoned?

jackzhp opened this issue over 7 years ago

update readme

xg-wang opened this pull request over 7 years ago

Incorrect version tagged as latest

jaydenseric opened this issue over 7 years ago

fix: fix vary origin

dead-horse opened this pull request over 7 years ago

change branch v2.x to default branch ?

haoxins opened this issue over 7 years ago

republish as @koa/cors?

jonathanong opened this issue almost 8 years ago

Skip request if origin is not allowed

kurayama opened this pull request almost 8 years ago

Tag version 2.2.1 as `latest`

natesilva opened this issue almost 8 years ago

Vary: Origin

lishengzxc opened this pull request almost 8 years ago

Vary: Origin

lishengzxc opened this pull request almost 8 years ago

Vary: Origin

lishengzxc opened this pull request almost 8 years ago

warning using koa@next

ralyodio opened this issue about 8 years ago

Its posible to use this plugin on a specific (set of ) routes instead of globally?

develmts opened this issue over 8 years ago

append vary header Origin when Access-Allow-Origin is not *.

iyuq opened this pull request over 8 years ago

add vary header

iyuq opened this pull request over 8 years ago

append Vary Header when Access-Allow-Origin is not *.

iyuq opened this pull request over 8 years ago

feat:not allow origin: "*" and "credentials: true" at the same time

jtyjty99999 opened this pull request over 8 years ago

add PATCH to default methods

defunctzombie opened this pull request over 8 years ago

add PATCH to default methods

defunctzombie opened this issue over 8 years ago

ctx.throw || ctx.assert doesn't send the headers back

Nighthawk14 opened this issue over 8 years ago

fix: support Koa2 / Node 6.2

leecade opened this pull request over 8 years ago

how to set options?

csrgxtu opened this issue over 8 years ago

Not setting headers on Koa2 / Node 6.2

KingScooty opened this issue over 8 years ago

fix: keepHeadersOnError shouldn't affect OPTIONS request

dead-horse opened this pull request over 8 years ago

fix: keepHeadersOnError should not affect OPTIONS request

dead-horse opened this pull request over 8 years ago

breaking change in 1.2.0

targos opened this issue over 8 years ago

set the header Vary:Origin when the access-control-allow-origin is not *

iyuq opened this pull request almost 9 years ago

Keep headers after an error (#11) for v2.x

PlasmaPower opened this pull request almost 9 years ago

Make it possible to permit CORS requests for multiple origins

eladnava opened this issue almost 9 years ago

Keep headers after an error

PlasmaPower opened this pull request almost 9 years ago

chore: use eslint instead of jshint

fengmk2 opened this pull request almost 9 years ago

feat: Support to use GeneratorFunction as `options.origin`

chinesedfan opened this pull request almost 9 years ago

Support to set GeneratorFunction as `option.origin`

chinesedfan opened this issue almost 9 years ago

Migrate to Koa 2

macalinao opened this pull request about 9 years ago

Koa2

omsmith opened this pull request about 9 years ago

If origin is set to * no headers are sent.

resistdesign opened this issue about 9 years ago

Not sending headers on Koa 2

thelinuxlich opened this issue about 9 years ago

typo

lfreneda opened this pull request over 9 years ago

fix: make more spec-compliant

fengmk2 opened this pull request almost 10 years ago

Make spec-compliant

dougwilson opened this issue almost 10 years ago