Implement CORS headers
Open
feature
priority: undecided
under discussion
- Dominant language
- Scala
- Stars
- 33
- Forks
- 16
- PR merge metrics
- No merged PRs in 30d
Description
## Background
Should we implement CORS headers?
How permissive?
Disable all outside servers?
Just echo back the user's Origin value? (That way if a different origin somehow replays the request with the user's credentials, it will fail.)
## Feature
Implement CORS headers
## Docs
[MDN web docs](https://developer.mozilla.org/en-US/docs/Web/HTTP/CORS)
[enable-cors.org](https://enable-cors.org/)
[Dev.to](https://dev.to/nicolus/what-you-should-know-about-cors-48d6)
Contributor guide
Assessment
This issue has not been assessed yet.