go-chi/cors

CORS net/http middleware for Go

Open All

10 open issues indexed

allow all origins wildcard not supported by chrome Open

go-chi/cors#17 · 3 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
Document differences between upstream github.com/rs/cors and this fork Open

go-chi/cors#21 · 6 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
AllowOriginFunc considered harmful (may lead to Web cache poisoning) Open

go-chi/cors#23 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 16, 2026
Listing Origin as an allowed request header is unnecessary Open

go-chi/cors#26 · 0 comments · 1 reaction · 0 assignees · Indexed Sep 16, 2026
Allowing methods that are not uppercase should be possible but isn't Open

go-chi/cors#27 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 16, 2026
Fixed error messages in TestDefault Open

go-chi/cors#28 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 16, 2026
Allow customizable behavior on cors failure Open

go-chi/cors#30 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
Pre Parsed Multi Value Headers not supported Open

go-chi/cors#33 · 4 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
Some malicious/spoofed preflight requests cause prohibitive load Open

go-chi/cors#36 · 12 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
Middleware unduly allow OPTIONS requests Open

go-chi/cors#37 · 1 comment · 2 reactions · 0 assignees · Indexed Sep 16, 2026

Get new issues in your inbox