actix-cors

• Fix Vary header when Private Network Access is enabled.
• Minimum supported Rust version (MSRV) is now 1.68.

• Add Cors::allow_private_network_access() behind an unstable flag (draft-private-network-access).

• Add Cors::block_on_origin_mismatch() option for controlling if requests are pre-emptively rejected.
• Minimum supported Rust version (MSRV) is now 1.59 due to transitive time dependency.

• Fix expose_any_header to return list of response headers.
• Minimum supported Rust version (MSRV) is now 1.57 due to transitive time dependency.

• Do not consider requests without a Access-Control-Request-Method as preflight.

• Update redis dependency to 1.
• Update actix-session dependency to 0.11.
• Add redis TLS features to actix-limitation.
• Minimum supported Rust version (MSRV) is now 1.88.

• Ensure that preflight responses contain a Vary header. #224

• Relax body type bounds on middleware impl. #223
• Update actix-web dependency to 4.0.0-rc.1.

• Minimum supported Rust version (MSRV) is now 1.54.

• Update actix-web dependency to 4.0.0-beta.15. #216

• Fix panic when wrapping routes with dynamic segments in their paths. #213

• Update actix-web dependency to 4.0.0.beta-14. #209

• No significant changes since 0.6.0-beta.3.

• Make Cors middleware generic over body type #195
• Fix expose_any_header behavior. #204
• Update actix-web dependency to v4.0.0-beta.10. #203
• Minimum supported Rust version (MSRV) is now 1.52.

• No notable changes.

• Update actix-web dependency to 4.0.0 beta.
• Minimum supported Rust version (MSRV) is now 1.46.0.

</details>

• Fix expose_any_header method, now set the correct field. #143

• Fix version spec for derive_more dependency.

• Ensure tinyvec is using the correct features.
• Bump futures-util minimum version to 0.3.7 to avoid RUSTSEC-2020-0059.

• Fix allow_any_header method, now set the correct field. #121

• Disallow * in Cors::allowed_origin. #114.
• Hide CorsMiddleware from docs. #118.
• CorsFactory is removed. #119
• The impl Default constructor is now overly-restrictive. #119
• Added Cors::permissive() constructor that allows anything. #119
• Adds methods for each property to reset to a permissive state. (allow_any_origin, expose_any_header, etc.) #119
• Errors are now propagated with Transform::InitError instead of panicking. #119
• Fixes bug where allowed origin functions are not called if allowed_origins is All. #119
• AllOrSome is no longer public. #119
• Functions used for allowed_origin_fn now receive the Origin HeaderValue as the first parameter. #120

• Allow closures to be used with allowed_origin_fn. #110

0.4.0

• feat: Add handle_with_protocols() for Sec-WebSocket-Protocol negotiation #479
• feat: Add optional typed message codecs with serde_json support.
• feat: Implement Sink<Message> for Session
• fix: Ignore empty continuation chunks #660
• fix: Truncate oversized control-frame payloads to avoid emitting invalid frames #508
• fix: Fix continuation overflow handling
• fix: Ensure MessageStream terminates on abrupt disconnects even if payload stalls (e.g. wss) #672

• Update actix-web dependency to 3.0.0.
• Minimum supported Rust version (MSRV) is now 1.42.0.
• Implement the Debug trait on all public types.

• Minimize futures-* dependencies
• Update actix-web dependency to 3.0.0-alpha.1

• Release

• Migrate to actix-web 2.0.0
• Bump derive_more crate version to 0.99.0

• Move cors middleware to separate crate